Linux Distros Unpatched Vulnerability : CVE-2026-19873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a...

Linux Distros Unpatched Vulnerability : CVE-2026-81624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certai...

AlmaLinux 8 : iperf3 (ALSA-2026:61257)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:61257 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

RHEL 9 : iperf3 (RHSA-2026:61389)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61389 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter,...

Project-CVE-2026-65351

BROWSER BOMB / PAYLOAD D'ÉPUISEMENT DES RESSOURCES Une analyse et une documentation d'ensemble du script de test de stress pour navigateur développé par Xer0TLabs & Persephrak Decentralized Syndicate. ATTENTION : À des fins éducatives, de recherche et de test autorisé uniquement. L'exécution de c...

CVE-2026-81636 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashgraphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.querycomplexity/3 multiplies child complexity by...

Bug-Bounty

בס״ד ⚜️ Aภl๏miuภuຮ ⚜️ ⫷ HacKingPro ⫸ ⫷ TryHackMe | KoTH ⫸ ⫷ Privilege-Escalation⫸ ⫷ ScanPro | Linfo | Diablo ⫸ ⫷ Offensive-Security | PenTest ⫸ ⫷ Goals | Studies | HacKing | AnyTeam ⫸ Bug Bounty Полезные подборки Книги Шпаргалки Чек-листы Инструменты Словники Дополнительно GitHub Bounty GitHub...

CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + среда Принцип: JSON-заполнение, выполняемое на стороне сервера при включённом плагине JSON body «JSON-заполнение» — это ключевая функция, предоставляемая JSON-плагином в Struts 2; её можно просто понимать как автоматический механизм преобразования данны...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere 신뢰할 수 없는 데이터의 역직렬화 - IBM WebSphere 7,8,8.5,9 원본 문서 출처 링크: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ 제목: IBM WebSphere 신뢰할 수 없는 데이터의 역직렬화 애플리케이션: IBM WebSphere 7,8,8.5,9 설명: 애플리케이션 서버는 WASPostParam 쿠키가 존재할 때...

Cybersecurity-Resources

Cybersecurity-Resources Une bibliothèque de diverses ressources en cybersécurité...

wordpress_cve-2018-6389

wordpresscve-2018-6389 يحاول استغلال ثغرة في ووردبريس CVE-2018-6389 يمكن استخدامها للتسبب في رفض الخدمة. تحذير: هذا البرنامج لا يقوم بتنفيذ هجوم رفض الخدمة على الأهداف الضعيفة؛ بل يقوم بتنفيذ طلب HTTP GET واحد فقط للتحقق من وجود الثغرة. تمت كتابة هذا البرنامج بدون أي تبعيات خارجية. إخلاء مسؤولية...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 lab This repository contains a small...

opencanary

OpenCanary par Thinkst Canary OpenCanary est un honeypot réseau multi-protocoles. Son cas d'utilisation principal est de détecter les pirates après qu'ils ont compromis des réseaux non publics. Il a des besoins en ressources extrêmement faibles et peut être ajusté, modifié et étendu. Vue d'ensemb...

backdoor-learning-resources

Ressources sur le Backdoor Learning Ce dépôt Github résume une liste de ressources sur le Backdoor Learning. Pour plus de détails et les critères de catégorisation, veuillez consulter notre enquête. Nous ferons de notre mieux pour maintenir ce dépôt Github en continu, sur une base mensuelle...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

CVE-2026-59941

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

OESA-2026-3527 iperf3 security update

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fixes: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted...

SSRF-Testing

Я благодарен за поддержку, полученную от Tuta Ресурсы для тестирования SSRF Server Side Request Forgery Быстрые обходы на основе URL: http://google.com:80+&@127.88.23.245:22/[email protected]:80/ http://127.88.23.245:22/+&@google.com:[email protected]:80/...

CVE-2026-75847

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...