HSTP

Hyper Simple Text Protocol on Networks Try now: https://hstp.ai npx hstp; The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet connected device...

WordPress-Long-Password-Denial-of-Service

WordPress 서비스 거부 CVE-2014-9016 면책 조항 이 스크립트의 내용은 오로지 윤리적인 방식으로만 사용되도록 의도되었습니다. 장비 소유자의 서면 허가 없이 이 스크립트를 사용하지 마십시오. 불법 행위를 수행할 경우, 체포되어 법이 허용하는 최대한의 범위까지 기소될 가능성이 높습니다. Primus27은 이 스크립트의 오용에 대해 어떠한 책임도 지지 않습니다. 이 스크립트는 개념 증명 용도로만 제공됩니다. 여기에 포함된 애플리케이션은 적절한 서면 승인을 받은 테스트 환경에서만 사용해야 합니다. 익스플로잇 긴 비밀번...

nray

nray 개요 Nray는 무료이며 플랫폼 및 아키텍처에 독립적인 포트 및 애플리케이션 계층 스캐너입니다. nray는 분산 방식으로 실행되어 스캔 속도를 높이고 다양한 관점에서 스캔을 수행할 수 있습니다. 이벤트 기반 결과를 통해 스캔 중에 정보를 추가로 처리할 수 있습니다예: jq와 같은 도구 사용. 사용자 문서를 찾고 있다면 프로젝트 홈페이지를 확인하세요. nray 개발 및 기여에 관한 정보는 계속 읽어주세요. 빌드 git 체크아웃 후 go build를 호출하여 프로젝트를 빌드할 수 있습니다. Nray는 순수 Go로...

PoW-Shield

Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...

shadowd

Logo Shadow Daemon — это веб-брандмауэр WAF, который перехватывает запросы на уровне приложения. Этот репозиторий содержит основной компонент Shadow Daemon, отвечающий за анализ и хранение запросов. Документация Полную документацию см. на shadowd.zecure.org. Установка Подготовка Используйте cmake...

fingerprintx

기능 • 설치 • 사용법 • fingerprintx 실행 • 라이브러리로 사용 • 왜 nmap이 아닌가? • 참고사항 • 감사의 말 fingerprintx는 httpx와 유사한 유틸리티로, RDP, SSH, MySQL, PostgreSQL, Kafka 등과 같은 서비스의 핑거프린팅도 지원합니다. fingerprintx는 Naabu와 같은 포트 스캐너와 함께 사용되어 포트 스캔 중 발견된 포트 집합을 핑거프린트할 수 있습니다. 예를 들어, 엔지니어가 IP 범위를 스캔한 후 발견된 모든 포트에서 실행 중인 서비스를 신속하게...

CVE-2026-92360

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

EUVD-2026-80738

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

CVE-2026-92360 ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

CVE-2026-92360

A medium-severity vulnerability (CVSS 3.1: 6.3 ) exists in ag-ui-protocol ag-ui 1.0 , specifically in the Event Application Layer component. The vulnerable element is the prepareRunAgentInput function in agent/agent.ts , where manipulation of the TEXT_MESSAGE_START argument triggers an origin val...

CVE-2026-92360 ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

Astra Linux – Vulnerability in vsftpd

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers that implement different protocols but use compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker, who has access to the victim’s traffic at the TCP/IP layer, can redirect...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-71360 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

FTP parser: recoverable RETR error escalated to APP_LAYER_ERROR disables FTP application-layer inspection on the same flow

FTP parser: recoverable RETR error escalated to APPLAYERERROR disables FTP application-layer inspection on the same flow Vulnerability Overview Suricata's FTP application-layer parser escalates a protocol-recoverable command-ordering error — a client sending RETR/STOR before negotiating a data po...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540 L7 policy bypass via unnormalized HTTP path matching

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

EUVD-2026-51153

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...