burp-cc-bridge

CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping| Protocol ---|---...

Security Bulletin: Consul vulnerable to a denial of service in HTTP APIs

Summary HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.1...

CVE-2026-105626

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19...

CVE-2026-105626 Consul vulnerable to a denial of service in HTTP APIs

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19...

EUVD-2026-110056

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19...

CVE-2026-105626 Consul vulnerable to a denial of service in HTTP APIs

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19...

CVE-2026-105626

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service (DoS) via the HTTP API . The root cause is the allocation of resources without limits or throttling (CWE-770), which may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability is addres...

Consul vulnerable to a denial of service in HTTP APIs

Summary HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.1...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. SYSTEM ANALYSIS Identifying the Attack Surface Starting with what is running in the environment. I list all active containers: docker ps The victim exposes a single port:8086. Currently, I do not have detailed information about the target. From the docker ps output, the...

CypherDog

CypherDog4.3 PoSh BloodHound Dog Whisperer aka PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API Compatible with Bloodhound 4.3+ and neo4j 4.4+...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

PT-2026-125072

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability CVE-2026-105626 is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

Apache AsterixDB 0.9.9 Missing Authentication

Summary Apache AsterixDB is a highly scalable data management system that can store, index, and manage semi-structured data, e.g., much like MongoDB, but it also supports a full-power query language with the expressiveness of SQL and more. Unlike analytics engines like Apache Hive or Apache Spark...

CVE-2026-67415

A flaw was found in rabbitmq-server. An authenticated remote attacker with administrative privileges can cause a Denial of Service DoS by submitting crafted runtime parameters through the Shovel Management HTTP API. Because these parameters are converted into non-reclaimable memory identifiers...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-server (UTSA-2026-130063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130063 advisory. RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS...

BIT-RABBITMQ-2026-67415 RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to th...

BIT-RABBITMQ-2026-67218 RabbitMQ: Super-stream HTTP creation skips configure-permission check

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls rabbitstreammanager:createsuperstream/... directly after isauthorized which only checks the management tag + vhost access via isauthorizedvhost. The stream-protocol...