lua-resty-waf

名称 lua-resty-waf - 基于 OpenResty 技术栈构建的高性能 WAF 目录 名称 状态 描述 要求 性能 安装 概要 公共函数 lua-resty-waf.loadsecrules lua-resty-waf.init 公共方法 lua-resty-waf:new lua-resty-waf:setoption lua-resty-waf:setvar lua-resty-waf:sieverule lua-resty-waf:exec lua-resty-waf:writelogevents 选项 addruleset addrulesetstring...

CVE-2022-4539

Considerazioni sull'uso: Adattabilità: Puoi facilmente modificare i payload, la logica di generazione degli IP e i proxy per adattarli a diversi scenari o ambienti. Uso etico: Assicurati di avere il permesso esplicito prima di testare qualsiasi sistema con questo codice. Scalabilità: Questo codic...

waf-community-bypasses

WAF-Community-Bypasses Web Application Firewalls, auch bekannt als WAF, sind Müll. Alle Anbieter, vom billigsten Cloudflare bis zu "enterpise"-Lösungen wie Imperva, Akamai, F5, Checkpoint oder Fortinet, betrügen ihre Kunden nur, indem sie 0 echten Schutz liefern. 99,9 % der WAF-Signaturen sind nu...

CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser

A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...

CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser

A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...

[SECURITY] Fedora 43 Update: nginx-mod-naxsi-1.6-21.fc43

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

PT-2026-66510

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 6.0.0 Description A Regular Expression Denial of Service ReDoS occurs in the sql parse.py component due to the SQL REGEX used for parsing SQL statements in the sqlparse library integration. The regular...

CVE-2026-56407

An integer overflow exists in libexpat's doProlog function due to improper handling of entity value lengths. A local attacker could exploit this to execute arbitrary code or access sensitive system data. Mitigation To prevent exploitation explicitly disable all internal and external XML entity...

CVE-2026-59688

The CVE-2026-59688 entry describes an OS Command Injection in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF. An authenticated user with high privileges can execute arbitrary OS commands on the affected appliance via the backup restore functi...

CVE-2026-59686

Technical details for CVE-2026-59686 are not publicly available in the provided documents; monitor for updates from vendors for affected products and fixes.

Exploit for CVE-2026-9830

CVE-2026-9830 Investigation Overview This directory contai...

PT-2026-64902

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress Software ECS Connection Manager affected versions not specified Progress Software Object Scale Connection Manager affected versions not specified Progress Software MOVEit WA...

PT-2026-64901

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

PT-2026-64904

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

[SECURITY] Fedora 44 Update: nginx-mod-naxsi-1.6-21.fc44

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

Linux Distros Unpatched Vulnerability : CVE-2026-44982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request bod...

CVE-2026-61718

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. From 1.6.2 until 1.6.12, the BunkerWeb web UI BiscuitMiddleware authorization bypass list included the /cache/ URL prefix, so routes in src/ui/app/routes/cache.py protected only by @loginrequired, including POST...

CVE-2026-54728

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWeb UI and API improperly validated and neutralized user-controlled input in a configuration-dependent path, allowing a...

CVE-2026-44982

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request body buffer from maxr.ContentLength, 0, so HTTP/1.1 requests using Transfer-Encoding: chunked and HTTP/2 requests without a content-length...

UBUNTU-CVE-2026-44982

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request body buffer from maxr.ContentLength, 0, so HTTP/1.1 requests using Transfer-Encoding: chunked and HTTP/2 requests without a content-length...