cc-ddos

Please Star this repo if you find it useful, because it's free : Donation information in the release The script still works normally, tested in 2025. cc-ddos A Python script to DDOS a website using multiple HTTP Flood methods, a normal website only needs 5 seconds to completely crash! How to Use:...

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

HAProxy-Keepalived-Sec-HighLoads

HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...

vPrioritizer

Overview | How it works | Quickstart | Roadmap | Contact Me Overview As indicated by sources like vulndb & cve, on a daily basis, approximately 50 new vulnerabilities become known to industry and it’s safe to assume that count is going to increase furthermore. It’s a huge number of vulnerabilitie...

twitterBFTD

twitterBFTD Twitterの死からの復活：ユーザーのツイート履歴から登録可能なドメイン名を検索します。 ブログ記事を見る: How I hijacked top celebrities tweets including Katy Perry, Shakira… pip install pythonwhois tweepy 使用方法: フォルダのルートで実行するだけで、BFTDresults.txtsが作成されます。...

CVE-2022-0441

A vulnerability classified as critical was found in MasterStudy LMS Plugin up to 2.7.5 on WordPress WordPress Plugin. This vulnerability affects an unknown part of the component New Account Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE...

socialscan

socialscan socialscan は、オンラインプラットフォームにおけるメールアドレスとユーザー名の使用状況を 正確 かつ 高速 にチェックします。 メールアドレスまたはユーザー名を指定すると、socialscan はそのプラットフォーム上で利用可能か、既に使用されているか、無効かを返します。 socialscan を類似ツール（例：knowem.com、Namechk、Sherlock）と差別化する機能： 1. 100% の正確性 : socialscan のクエリ方式は、類似ツールでよく発生する偽陽性や偽陰性を排除し、結果が常に正確であることを保証します。 2. 速度 :...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

OnionHarvester

OnionHarvester V2 A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is publishe...

poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

TLDHunt

TLDHunt - Domain Availability Checker TLDHunt is a command-line tool designed to help users find available domain names for their online projects or businesses. By providing a keyword and a list of TLD top-level domain extensions, TLDHunt checks the availability of domain names that match the giv...

EUVD-2026-91065

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret deletecode and uploader metadata by calling the API::info endpoint which returns the complete raw metadata object without a field whitelist. Attackers can use the...

CVE-2021-44228

CVE-2021-44228 On December 9, 2021, the world became aware of a new security vulnerability concerning Log4J. The CVSSv3 Common Vulnerability Scoring System score of the vulnerability was assessed as 10, making it critical https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Its CVSSv3 vector i...

awesome-latency-attacks

Awesome 深度学习延迟攻击与防御 本仓库作为综述《 Deep Learning Latency Attacks and Defenses: A Cross-Domain Survey 》的配套资源进行维护。它索引了关于已部署 AI 系统中面向延迟的可用性威胁的论文、代码链接、分类学注释和图表。 本列表聚焦于影响推理时或系统级成本——延迟、能耗、吞吐压力以及截止时间错过——的攻击与防御，而非仅改变模型预测的攻击。目前包含 110 项工作 （71 项推理阶段攻击、13 项训练阶段攻击、26 项防御）。 在 GitHub Pages 上的交互式表格 中搜索和筛选该目录。 概述 图 1...

EUVD-2025-209815

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CentOS Linux 8.4 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (CENTOS8.4:CLSA-2025:1759951300)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1759951300 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key...

Fedora 44 : apptainer (2026-e84de41d80)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e84de41d80 advisory. Update to upstream 1.5.4, including fix for high severity vulnerability GHSA-cr2j-534f-mf3g and for CVE-2026-41178. Tenable has extracted the preceding...

CentOS Linux 6 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools (CENTOS6:CLSA-2025:1758645375)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1758645375 advisory. - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid...

Rocky Linux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775726631)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775726631 advisory. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

CentOS Linux 7 [TuxCare] Security Update: lz4 / lz4-devel / lz4-static (CENTOS7:CLSA-2023:1695326199)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1695326199 advisory. - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow,...