64 matches found
slowloris
slowloris.py - 简单的 Python slowloris 什么是 Slowloris？ Slowloris 基本上是一种影响多线程服务器的 HTTP 拒绝服务攻击。它的工作原理如下： 1. 我们开始发起大量 HTTP 请求。 2. 我们定期（每约 15 秒）发送头部信息，以保持连接处于打开状态。 3. 除非服务器主动关闭，否则我们从不关闭连接。如果服务器关闭了一个连接，我们就创建一个新连接并继续做同样的事情。 这会耗尽服务器的线程池，导致服务器无法响应其他用户。 引用 如果你觉得这个作品有用，请按以下方式引用它 root@kitploit:...
GoldenEye
本项目已不再维护 GoldenEye GoldenEye 是一款仅用于安全测试目的的 Python 3 应用程序！ GoldenEye 是一款 HTTP DoS 测试工具。 利用的攻击向量：HTTP Keep Alive + NoCache 使用方法 root@kitploit: USAGE: ./goldeneye.py OPTIONS OPTIONS: Flag Description Default -u, --useragents 要使用的用户代理文件 默认: 随机生成 -w, --workers 并发工作线程数 默认: 50 -s, --sockets 并发套接字数 默认: 3...
CVE-2026-48888
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
EUVD-2026-72651
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
PT-2026-86995
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Input Validation vulnerability (CVE-2025-15284, CVE-2026-2391)
Summary There are vulnerabilities in qs-6.14.0.tgz, qs-6.14.1.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-15284, CVE-2026-2391. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-15284 DESCRIPTION: Improper Input Validation vulnerability in qs...
RHCOS 4 : OpenShift Container Platform 4.15.z (RHSA-2023:7200)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7200 advisory. - golang: net/http, x/net/http2: rapid stream resets can cause excessive work CVE-2023-44487 CVE-2023-39325 - golang:...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in qs (parse modules) (CVE-2025-15284)
Summary A vulnerability in qs parse modules that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-15284 DESCRIPTION: Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option...
MiracleLinux 8 : go-toolset:rhel8 (AXSA:2024-7550:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7550:01 advisory. golang: net/http/internal: Denial of Service DoS via Resource Consumption via HTTP requests CVE-2023-39326 golang: cmd/go: Protocol Fallback when...
MiracleLinux 9 : golang-1.21.13-3.el9_4 (AXSA:2024-8826:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8826:07 advisory. net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions...
MiracleLinux 9 : git-lfs-3.6.1-1.el9 (AXSA:2025-10212:04)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10212:04 advisory. golang: crypto/tls: panic when processing post-handshake message on QUIC connections CVE-2023-39321 golang: crypto/tls: lack of a limit on buffered...
EUVD-2019-7963
Malware in sbrugna...
EUVD-2024-51488
Malicious code in bioql PyPI...
EUVD-2025-10815
Malicious code in bioql PyPI...
EUVD-2025-22583
Malicious code in bioql PyPI...