massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-119277

A flaw was found in MariaDB Connector/J. This vulnerability can lead to a Denial of Service DoS because packet decoders do not verify that sufficient data remains in the receive buffer before reading server-specified lengths. A compromised database server or an attacker positioned between the...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

SEDATED

The SEDATED® Project Sensitive Enterprise Data Analyzer To Eliminate Disclosure focuses on preventing sensitive data such as user credentials and tokens from being pushed to Git. Table of Contents Purpose Setup Clone down SEDATED® Update .example files Customize /config/customconfigs.sh variables...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 & Gogs-RCE-0.13.0 Validated against a 0.13.0-era Gogs behind a reverse proxy. Primitive: web editor symlink-follow to an ABSENT .git/hooks/pre-receive creates that file executable. Every subsequent push to the repo runs it. Usage: Reverse shell run listener first: nc -lvnp 4444...

CVE-2020-1350

CVE-2020-1350 SigRED Workaround to mitigate the impact of the vulnerability by reducing the TCP Recieve Packet Size Maximum Limit on the DNS Server and restarting DNS...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. This repository contains a professional-grade exploit for a critical vulnerability in Gogs versions prior to 0.13.0. The exploit leverages a logical flaw where the Gogs API fails to...

CVE-2023-38545-POC

CVE-2023-38545 POC for the curl command line tool This POC is based on the earlier POC created by UTsweetyfish, shared in this repository:https://github.com/UTsweetyfish/CVE-2023-38545. Contrary to that POC, this one is for the commandline tool and not the libcurl library, and doesn't require...

CVE-2025-8110-Gogs-Remote-Code-Execution

Affected Software: Gogs self‑hosted Git service versions prior to 0.13.0. Vulnerability Type: Command injection in the Git hook mechanism. Description: An attacker with push access to a repository can craft a malicious Git hook that injects commands into the post‑receive hook script, leading to...

CVE-2026-3854

CVE-2026-3854: RCE on GitHub via X-Stat header injection Practical summary of how the vulnerability discovered by Wiz Research in GitHub.com and GitHub Enterprise Server's internal git push pipeline works. Disclaimer This material is for educational purposes and offensive security research. The...

CVE-2026-99133

A flaw was found in the Linux kernel's IUCV Inter-User Communication Vehicle networking subsystem. A local attacker can exploit this flaw to cause a Denial of Service DoS through a kernel crash or unexpected socket disconnection. The vulnerability is triggered when processing message receive...

CVE-2026-98929

A flaw was found in the Linux kernel's Media Access Control Security MACsec subsystem. When creating a MACsec network interface configured with hardware offload over a device supporting Large Receive Offload LRO, the kernel registers the interface before its internal security entity SecY is...

EUVD-2026-109818

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byt...

lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

PT-2026-123280

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The exploit has been made available to the...

PT-2026-123293

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byt...

Important: lrzsz

Issue Overview: lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped...