EUVD-2026-122845

fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags...

CVE-2026-126066

The fast-xml-parser library is vulnerable to a CPU-exhaustion denial of service prior to version 5.12.0 . When the non-default stopNodes option is enabled, the readStopNodeData() function in OrderedObjParser.js calls readTagExp() for each less-than character in an unterminated stop-node body. Thi...

CVE-2026-124016

postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauthenticated remote attackers to cause excessive CPU consumption in the PostalMime.processLine function by crafting deeply nested multipart email messages with boundary lines sharing long...

CVE-2026-121369

Platforms running Arista EOS are vulnerable to a resource exhaustion issue under specific link configurations. An attacker with direct connectivity to the system can cause a significant increase in CPU and memory utilization , resulting in slow responsiveness and potentially triggering a system r...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It ca...

Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

Summary asn1.fromDer decodes the contents of BIT STRINGs as ASN.1 by default. That decode ignored the maxDepth recursion limit an incomplete fix of CVE-2025-66031 and also decoded nested BIT STRINGs, keeping a full copy of the decoded contents at each level, so small crafted DER or PEM inputs...

GHSA-RHR8-3PM8-CQ29 Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

Summary asn1.fromDer decodes the contents of BIT STRINGs as ASN.1 by default. That decode ignored the maxDepth recursion limit an incomplete fix of CVE-2025-66031 and also decoded nested BIT STRINGs, keeping a full copy of the decoded contents at each level, so small crafted DER or PEM inputs...

EUVD-2026-113348

Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

baochip-1x

Baochip 1x This repo contains the open source elements of the Baochip 1x. This repo focuses on the hardware elements of the Baochip 1x. Developers are referred to the official Rust SDK, located in the Xous repo. There is a vscode extension named baochip which can automate build & flash for...

COPG

🎮 COPG — Advanced Android Customization & Spoofing A powerful platform for device & app spoofing, system-level control, and advanced ROM capabilities. 🌐 Official website — download COPG free & buy COPG PRO: vendors.copg.my 🌐 Languages / 语言：English · 简体中文 ✨...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...