Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102992. PoCs published by X41 D-Sec GmbH.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in Shadowsocks, including log file manipulation via crafted hostnames, command execution through unsanitized input in autoban.py, and weak key derivation using MD5. It provides technical analysis, proof-of-concept payloads, and mitigation recommendations.
Description
Shadowsocks - Log File Command Execution
Exploits (1)
This advisory details multiple vulnerabilities in Shadowsocks, including log file manipulation via crafted hostnames, command execution through unsanitized input in autoban.py, and weak key derivation using MD5. It provides technical analysis, proof-of-concept payloads, and mitigation recommendations.