32 matches found
zeek-spicy-ospf
zeek-spicy-ospf Este é um analisador de pacotes OSPF v2 & v3 baseado em Spicy para o Zeek. Você deve instalar Spicy para usar este pacote. Links: Lógica original importada de https://github.com/s-wells/spicyparsers/tree/main/ospf, com permissão do autor...
zeek-community-id
Hashing dei flussi "Community ID" per Zeek Questo pacchetto Zeek fornisce supporto per l'hashing dei flussi Community ID, un modo standardizzato di etichettare i flussi di traffico nei monitor di rete. Una volta caricato, il pacchetto aggiunge un campo stringa communityid al conn.log. Nota Zeek 6...
zeek-elf
Um Pacote ELF para Zeek Este pacote implementa: ELF TLDR! Se você tem o zkg e já executou... root@kitploit: zkg autoconfig ... então você pode instalar este pacote da seguinte forma: root@kitploit: sudo zkg install zeek-elf Agora, em qualquer script Zeek, basta carregar o plugin e ele "simplesmen...
community-id-spec
Hashing dei flussi Community ID Quando si elaborano dati di flusso da una varietà di applicazioni come Zeek e Suricata, è spesso desiderabile spostarsi rapidamente da un dataset all'altro. Sebbene le informazioni sulla tupla di flusso richieste siano solitamente presenti nei dataset, i dettagli d...
zeek-plugin-roca
Johanna::ROCA Questo plugin implementa il rilevamento delle chiavi CVE-2017-15361; è una reimplementazione del codice sorgente disponibile su https://github.com/crocs-muni/roca. Questo plugin fornisce due nuove BIFs che possono verificare le chiavi pubbliche: rocavulnerablecert verifica se un...
PT-2026-62010
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat...
PT-2026-62011
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py protects file extraction with libarchive's secure flags, but creates directory entries with a raw os.makedirsos.path.joindest, entry.pathname that has no traversal protection. An uploaded malicious archive...
EUVD-2023-59424
Malicious code in bioql PyPI...
EUVD-2023-59423
Malicious code in bioql PyPI...
EUVD-2023-59425
Malicious code in bioql PyPI...
The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat, which involves reading data beyond the buffer in memory, allows attackers to cause service failures or gain unauthorized access to protected information.
The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain unauthorized access to protected information...
The vulnerability of the Zeek plugin for industrial control systems’ network protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Zeek plugin for industrial control systems’ network protocols ICSNPP-Ethercat is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Zeek plugin for industrial system control protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Zeek plugin for industrial control systems’ network protocols ICSNPP-Ethercat is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-7242
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory...
CVE-2023-7244
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution...
CVE-2023-7243
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...
CVE-2023-7243
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...
Out-of-bounds
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...
CVE-2023-7242
CVE-2023-7242 affects the ICSNPP Ethercat Zeek Plugin for Zeek (versions d78dda6 and prior). The vulnerability is an out-of-bounds read in the Ethercat packet analysis path, which can crash the Zeek process and may leak information in memory. Mitigation: update to commit 3bca34c or later. ICS adv...
CVE-2023-7242 Ethercat Zeek Plugin Out-of-bounds Read
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory...