Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

CVE-2026-110932

A flaw in the theme resource endpoint of Keycloak , an open-source identity and access management solution, allows for unauthenticated persistent disk exhaustion . The root cause is the server's failure to validate theme names before using them as keys for an on-disk gzip cache . An unauthenticat...

CVE-2026-110932 Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache

A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The issue occurs because the server fails to validate theme names before using them as keys for an on-disk gzip cache. An unauthenticated attacker can exploit this by sending many...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2026-122323

Kyverno versions 1.11.0 before 1.19.2 are vulnerable to a memory exhaustion flaw in the FetchSignatureBlob component due to unbounded decompression. Attackers who control registry referrers or signatures can provide highly compressed Notary signature layers; these small gzip layers may decompress...

CVE-2026-122322

Kyverno versions 1.11.0 before 1.19.2 are vulnerable to a memory exhaustion flaw in the extractStatement function. This is caused by unbounded decompression of Notary attestation layers. A remote attacker controlling registry referrer artifacts can provide highly compressed gzip predicate layers ...

dnsteal

dnsteal v 2.0 This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported...

CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

DEBIAN-CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059

Versions through 3.15 of the Furl library for Perl are vulnerable to memory exhaustion due to the unbounded decompression of HTTP responses. The affected component inflates response bodies using gzip , x-gzip , or deflate Content-Encoding and appends the output to the response string without a si...

EUVD-2026-115332

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059 Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059 Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

Security Bulletin: Vulnerability in Amazone-ion-java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Amazon-ion-java has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in Amazon ion-java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Amazon ion-java has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

CVE-2026-65059: Improper Handling of Highly Compressed Data

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CentOS Linux 6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat (CENTOS6:CLSA-2026:1793265274)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793265274 advisory. - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for...

PT-2026-135541

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...