12 matches found
CVE-2026-23918
CVE-2026-23918 Apache modhttp2 双重释放检测器 https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold CRASHTHRESHOLD...
ufuzz
UFuzz,即 Universal Plug and Fuzz,是一款自动化的 UPnP 模糊测试工具。它会枚举网络上的所有 UPnP 端点,查找可用的服务并对其进行模糊测试。它还支持使用 Burp 代理日志对 HTTP 进行模糊测试。 它专为模糊测试嵌入式系统而设计,因此仅支持单线程。同时,它的载荷集非常有限,因为对这些系统进行模糊测试可能很慢。某些载荷如盲 SQL 注入和命令注入依赖延迟来判断注入是否成功,因此可能出现误报。其他载荷如格式字符串和缓冲区溢出则设计为使用自定义监视器来检测崩溃。...
📄 FreeType Font Rendering Overflow Test Harness / Crash Detection
This C program is a testing harness built around the FreeType font rendering library to detect potential memory corruption issues such as heap buffer overflows when loading malicious or malformed TrueType font files...
NLTK Simple Random Input Fuzzer for Function Testing
This script is a basic fuzzing tool that generates random inputs strings containing letters, numbers, and special characters and feeds them into a target function to test its stability. It runs multiple iterations, monitors for exceptions or crashes, and counts how many errors occur during...
📄 OpenBabel 3.1.1 Parsing Issues
This Metasploit auxiliary module generates specially crafted proof of concept files targeting potential parsing vulnerabilities in OpenBabel version 3.1.1 such as NULL pointer dereference and out-of-bounds read conditions...
LabExploit
LiveExploit SECURITY RESEARCH TOOL - USE RESPONSIBLY A...
EUVD-2015-4046
Malware in sbrugna...
Exploit for Uncontrolled Resource Consumption in Oracle Mysql_Cluster
CVE-2025-21574-Exploit Key Features of this Black-Box Exploi...
OSV-2022-655 UNKNOWN WRITE in pdfi_repair_file
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49606 Crash type: UNKNOWN WRITE Crash state: pdfirepairfile pdfireadxrefstreamdict pdfireadxref...
BikerSOS - Crash detection - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application BikerSOS - Crash detection published at the 'play' market has multiple vulnerabilities...
General Purpose Fuzzing: Honggfuzz
Honggfuzz is a general-purpose fuzzing tool. Given a starting corpus of test files, Hongfuzz supplies and modifies input to a test program and utilize the ptrace API / POSIX signal interface to detect and log crashes. Features Easy setup : No complicated configuration files or setup necessary —...
Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash
Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash !/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IA...