hulk

Strumento DoS Hulk Strumento DoS HULK portato in linguaggio Go da Python. Utilità Python originale di Barry Shteiman http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/ Ho semplicemente portato il codice così com'è, in modo rapido e sporco. I nomi delle funzioni originali sono stati...

Impulse

💣 Impulse Toolkit moderno per Denial-of-service 💻 Finestra principale 📡 Metodi:...

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

Sicherheitshinweis: HTTP-Request-Smuggling durch nicht geparste Transfer-Encoding-Werte tinyhttp Zugewiesene CVE-ID: CVE-2026-66752 Zusammenfassung tinyhttp prüft lediglich, ob ein Transfer-Encoding-Header vorhanden ist. Der Wert selbst wird nie betrachtet. Jeder Wert – einschließlich Kodierungen...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Avviso di sicurezza: la ricerca non controllata di una stanza provoca il crash del server Let's Chat CVE ID assegnato: CVE-2026-66749 Riepilogo Una singola richiesta HTTP da qualsiasi account autenticato arresta il processo del server Let's Chat. GET /messages accetta un parametro room, cerca...

aiodnsbrute

Async DNS Brute Ein Python 3.5+ Tool, das asyncio verwendet, um Domainnamen asynchron per Brute-Force zu erraten. Geschwindigkeit Es ist schnell. Benchmarks auf kleinen VPS-Hosts zeigen etwa 100k DNS-Auflösungen in 1,5-2 Minuten. Eine Amazon M3 Box wurde verwendet, um 1 Million Anfragen in etwas...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Advisory di Sicurezza: DoS a Ciclo Infinito nel Parser MIME di facil.io Boundary Parziale ID CVE assegnato : CVE-2026-66730 Prodotto: facil.io Versioni interessate: facil.io = 0.6.0 tutte le 0.6.x, tutte le 0.7.x, master; introdotto insieme al parser MIME in 0.6.0 Componente: lib/facil/http/http....

regexploit

Regexploit Finde Regexes, die anfällig für Regular Expression Denial of Service ReDoS sind. Mehr Infos imDoyensec Blog Viele Standard-Parser für reguläre Ausdrücke haben eine unbegrenzte Worst-Case-Komplexität. Das Matching eines regulären Ausdrucks kann schnell sein, wenn eine passende...

CVE-2021-31166

CVE-2021-31166 Perché Recentemente ho scritto un exploit per CVE-2021-31166, sfrutta CVE-2021-31166 e CVE-2021-31166. Un pentester dovrebbe usare https://github.com/mauricelambert/CVE-2021-31166, ma nei team SOC abbiamo bisogno di conoscere la vulnerabilità specifica per correggerla adeguatamente...

CVE-2024-49113

LDAP Nightmare Un exploit per CVE-2024-49113 segnalato da Yuki Chen @guhe120. Una vulnerabilità nel Lightweight Directory Access Protocol LDAP di Windows. Creato da SafeBreach Labs pubblicato il 1° gennaio 2025. Per l'analisi tecnica completa della vulnerabilità e come siamo riusciti a sfruttarla...

ATFuzzer

ATFuzzer "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" wurde zur 35. Annual Computer Security Applications Conference ACSAC 2019 angenommen. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Zusammenfassung Dieses Papi...

CVE-2026-82330

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82328

A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the usedclrs palette count parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue c...

CVE-2026-82327

A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that...

CVE-2026-82324

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-81285

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

CVE-2025-61156

CVE-2025-61156 ThreatFire System Monitor =v4.7.0.53 के kernel-mode TfSysMon.sys घटक में एक भेद्यता खोजी गई है जो बिना विशेषाधिकार वाले उपयोगकर्ताओं को kernel-mode विशेषाधिकारों के साथ मनमानी प्रक्रिया समाप्ति करने की अनुमति देती है। परिणामस्वरूप, PPL और संरक्षित सिस्टम प्रक्रियाओं को जबरन रोका जा...

CVE-2026-14266

CVE-2026-14266 — Estouro de Buffer na Heap no Decodificador XZ do 7-Zip Severidade Crítica | CVSS: 8.8 Alta | CWE-122: Estouro de Buffer Baseado em Heap Afetados: 7-Zip ≤ 26.01 | Corrigido: 7-Zip 26.02 2026-06-25 Descoberto e Analisado por: Li Yuxuan liyuxuan504-byte e equipe Resumo Executivo...

CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， Poc की सफलता का संकेत mqsvc.exe प्रक्रिया का क्रैश होना है, और कोई पॉप-अप संदेश नहीं आता, जिसे प्रक्रिया मॉनिटर जैसे प्रोग्राम में देखना होता है Windows टर्मिनल या कमांड प्रॉम्प्ट में कमांड निष्पादित करें python poc.py पीड़ित PC का IP...

EvilFOCA

Evil FOCA Anforderungen Windows XP oder höher. .NET Framework 4 oder höher. Winpcap-Bibliothek http://www.winpcap.org Einführung Evil Foca ist ein Werkzeug für Sicherheits-Pentester und -Auditoren, dessen Zweck es ist, die Sicherheit in IPv4- und IPv6-Datennetzwerken zu testen. Das Werkzeug ist i...

CVE-2026-23918

CVE-2026-23918: Apache HTTP/2 Double-Free DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415: Double Free | CVSS 8.8 | Behoben in 2.4.67 Eine Double-Free-Schwachstelle in modhttp2 h2mplx.c ermöglicht es entfernten Angreifern, über schnelle RSTSTREAM-Frames einen Denial of Service Absturz de...