mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

BurpSuiteJSBeautifier

Burp Suite JSBeautifier Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

loki-parse

loki-parse Это Python-скрипт, который обнаруживает и разбирает сетевой трафик loki-bot вредоносного ПО между скомпрометированным хостом и C2-сервером. Этот скрипт может быть полезен аналитикам DFIR и исследователям безопасности, которые хотят узнать, какие данные передаются на C2, отслеживание бо...

mtk-su-reverse-cve-2020-0069

mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore Ceci est une version alpha d'un analyseur assemblies.blob AssemblyStore écrit en Python. L'outil est capable de dépaqueter et de rempaqueter les fichiers assemblies.blob et assemblies.manifest Xamarin à partir d'un APK. Installation Exécutez le script...

smoke_conf_extract

Извлечение конфигурации Smoke Обзор Этот проект предназначен для извлечения конфигураций из образцов smokeloader, начиная с начальной стадии. Я был настроен делать это статически, поэтому пришлось полагаться на такие инструменты, как Unicorn, чтобы обойти некоторые из более сложных компонентов...

CVE-2026-14266

CVE-2026-14266 PoC: 7-Zip XZ 힙 버퍼 오버플로우 PoC 생성기 7-Zip의 XZ 힙 버퍼 오버플로우 취약점을 재현하기 위한 PoCProof of Concept 생성기입니다. 이 스크립트는 취약한 멀티스레드 XZ 압축 해제 경로에서 크래시 조건을 재현하도록 특별히 제작된 .xz 아카이브를 생성합니다. 취약점 정보 CVE : CVE-2026-14266 유형 : 힙 버퍼 오버플로우 Heap Buffer Overflow 수정 버전 : 26.02 이상 구성 요소 : XZ 디코더 XZ Decoder 기능 처음부터...

mongobleed

mongobleed CVE-2025-14847 - Exploit de fuite de mémoire MongoDB sans authentification Un exploit de preuve de concept de la vulnérabilité de décompression zlib de MongoDB qui permet à des attaquants sans authentification de divulguer la mémoire sensible du serveur. Vulnérabilité Un défaut dans la...

qualcomm_baseband_scripts

qualcommbasebandscripts Набор скриптов для реверс-инжиниринга прошивки модема Qualcomm. Все смещения/адреса в скриптах обновлены для мартовской прошивки Pixel 5, и их нужно изменить при использовании другой версии. Объединение mergemodemfirmware.py объединяет все файлы modem.b modem.b00, modem.b0...

CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...

CVE-2026-39113

CVE-2026-39113: Переполнение буфера в куче в опциональном расширении SQLAR для SQLite Executive Summary CVE-2026-39113 — это переполнение буфера в куче в опциональном расширении SQLAR для SQLite. В приложении, загрузившем это расширение, атакующий, способный вызвать sqlaruncompress с управляемым...

CVE-2026-103262

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits...

CVE-2025-14847-MongoDB

CVE-2025-14847-MongoDB - Outil de recherche sur la divulgation mémoire Présentation Ce dépôt contient un outil de recherche éducatif conçu pour démontrer les concepts de sécurité mémoire derrière CVE-2025-14847, une vulnérabilité critique découverte dans l'implémentation de la décompression BSON ...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Эксплойт типа «отказ в обслуживании» для HTTPS-слушателя Sliver C2. Подбирает перебором per-session nonce кодирования PNG и доставляет «бомбу декомпрессии», которая исчерпывает память сервера. Опубликовано как GHSA-663m-7x7m-g4fw. Краткое описание Канал C2 Sliver по HTT...

CVE-2026-53716

A flaw was found in Envoy Gateway. A remote attacker, by providing a specially crafted compressed WebAssembly Wasm payload through a tenant-controlled URL, can exploit a vulnerability where the system decompresses the gzip file without limiting the output size. This can lead to an uncontrolled...

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

ImpactWho is impacted: - Any application using Zapros to make HTTP requests to untrusted servers - Applications that follow redirects to attacker-controlled hostsAttack vector: - A malicious HTTP server returns a response with many chained content encodings. When the client attempts to decode, it...

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)

ImpactDenial of service via memory exhaustion. Affects all callers who streamed compressed responses relying on the chunk size — explicit iterbyteschunksize=... or the default — to bound memory. The decoder ignored that bound, so a chunk could be far larger than requested and a single compressed...

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

SummaryThe audio decode-duration guard maxdurations, env VLLMMAXAUDIODECODEDURATIONS, default 600s that protects against audio decompression-bomb DoS is wired into only the speech-to-text path /v1/audio/transcriptions. The chat audio path /v1/chat/completions, inputaudio content parts calls the...