metlo

Metlo API 보안 API를 보호하세요. Metlo는 오픈소스 API 보안 플랫폼입니다 Metlo는 15분 안에 설정할 수 있는 오픈소스 API 보안 도구로, 엔드포인트를 인벤토리화하고 악성 행위자를 탐지하며 실시간으로 악성 트래픽을 차단합니다. 실시간 API 공격 탐지 악성 행위자 자동 차단 모든 API 엔드포인트 및 민감 데이터 인벤토리 생성 프로덕션 배포 전 API 사전 테스트 지금 무료로 시작하세요! 오픈소스 제품을 배포하려면 AWS, GCP, Azure 및 Docker에 대한 설명서를 참조하세요. 기능 엔드포인트 ...

DrMITM

D̳r̳M̳I̳T̳M̳ DrMITM은 모든 트래픽을 글로벌하게 기록하도록 설계된 프로그램입니다. Diagram: 작동 방식 DrMITM은 웹사이트에 요청을 보내고, 웹사이트 서버가 요청 시 웹사이트 IP에 의존하도록 설계된 경우를 대비하여 웹사이트의 IP를 반환합니다. 또한 웹사이트로 가는 요청은 서버에도 전송되어, 서버는 웹사이트가 보내는 메시지를 기록합니다. 그런 다음 동일한 메시지를 반환하여 서버로 직접 보내는데, 서버는 이를 웹사이트로 간주할 수 있습니다. 하지만 프로그램이 IP를 변경한 후에는 우리의 요청을 웹사이트로...

EDRPrison

EDRPrison 공동 저자: @oops4githttps://github.com/oops4git EDRPrison은 합법적인 WFP 콜아웃 드라이버인 WinDivert를 활용하여 EDR 시스템을 효과적으로 무력화합니다. Shutter, FireBlock, EDRSilencer와 같은 도구에서 영감을 얻은 이 프로젝트는 네트워크 기반 우회 기술에 중점을 둡니다. 이전 도구들과 달리 EDRPrison은 내장 WFP에만 의존하는 대신 외부의 합법적인 WFP 콜아웃 드라이버를 설치하고 로드합니다. 또한 EDR 프로세스 또는 해당 실행...

CVE-2025-13476

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

A flawed TLS handshake implementation affects Viber Proxy in multiple platforms

Overview The Rakuten Viber messaging app for Android V25.7.2.0g and Windows V25.6.0.0-V25.8.1.0, has a flaw in its TLS handshake implementation when using the Cloak proxy configuration. This flaw allows for easy identification of proxy usage, potentially compromising user anonymity. Description...

The vulnerability of the tool for blocking unauthorized incoming traffic in GitHub Bullfrog’s working processes, related to the disclosure of information during data transmission, allows a violator to bypass the sandbox protection mechanism.

The vulnerability of the tool for blocking unauthorized incoming traffic in GitHub Bullfrog is related to the disclosure of information during data transmission. Exploiting this vulnerability could allow a hacker to bypass the sandbox’s security mechanisms...

EUVD-2021-27356

Malware in sbrugna...

EUVD-2017-17293

Malware in sbrugna...

EUVD-2021-2824

Malicious code in bioql PyPI...

EUVD-2023-39833

Malicious code in bioql PyPI...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

CVE-2025-47775

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

CVE-2025-47775 Bullfrog's DNS over TCP bypasses domain filtering

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

CVE-2018-9487

In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

The vulnerability of the WireGuard VPN service, related to errors in handling links, allows a malicious actor to block IP traffic on selected IP addresses.

The vulnerability of the VPN service WireGuard is related to errors in handling links. Exploiting this vulnerability allows a remote attacker to block IP traffic on selected IP addresses...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

PYSEC-2023-321

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...