perl-Net-DNS security update

An update is available for perl-Net-DNS. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-Net-DNS package contains a collection of Perl modules that act ...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

hacks

Hacks Hacky one-off scripts, tests etc...

zirgen

Zirgen 回路コンパイラ Zirgenは、ドメイン固有言語（これも「zirgen」と呼ばれます）用のコンパイラであり、RISC Zero証明システム向けの算術回路を生成します。 ほとんどの場合、RISC ZeroのユーザーはzkAppsをRustで記述し、RISC-V zkVMを使用するべきであり、Zirgenで直接構築するべきではありません。しかし、場合によっては、アプリケーションの一部を算術回路として記述し、証明システムに直接統合してパフォーマンスを向上させることが必要または望ましいことがあります。実際、zkVM回路の次のバージョンはZirgenで記述されています！...

CVE-2026-18464

CVE-2026-18464 — WP Maps Pro 本仓库旨在为已披露的漏洞提供技术参考。它不包含武器化的拒绝服务脚本。 概述 项目| 详情 ---|--- CVE| CVE-2026-18464 产品| WP MAPS PRO 受影响版本| 6.1.3 修复版本| 6.1.3 弱点| CWE-400 — 不受控制的资源消耗 攻击要求| 未认证的远程攻击者 严重性| 7.5 CVSS 3.1 发布日期| 2026-08-09 发现者| Mohammad Aghdasi CNA / 协调方| WPScan 摘要 一个暴露给未认证用户的 AJAX...

CVE-2019-13288

CVE-2019-13288 – XpdfのParser::getObjにおける無限再帰 概要 CVE-2019-13288 は、Xpdfバージョン4.01.01 で発見された脆弱性で、具体的にはParser.cc内のParser::getObj関数に存在します。この欠陥は、特別に細工されたPDFファイルを処理する際に無限再帰 を引き起こし、サービス拒否（DoS）状態をもたらす可能性があります。この脆弱性は CVE-2018-16646に類似しており、再帰関数における堅牢な入力検証の重要性を浮き彫りにしています。 技術詳細 CVE ID : CVE-2019-13288...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

CVE-2026-59156

OpenImageIO , a toolset for reading and writing image files used in VFX/animation, has an unbounded recursion vulnerability in its FITS header parser . The affected function FitsInput::read_fits_header() (in src/fits.imageio/fitsinput.cpp) calls itself without a depth bound when processing a craf...

CVE-2019-13288-POC

CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf Xpdf 4.01.01 では、Parser.cc の Parser::getObj 関数が、巧妙に細工されたファイルを介して無限再帰を引き起こす可能性があります。リモートの攻撃者はこれを DoS 攻撃に悪用できます。これは CVE-2018-16646 に類似しています。...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

EUVD-2026-82602

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

EUVD-2026-82533

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...

CVE-2026-93450

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

Important: Red Hat Security Advisory: perl-Net-DNS security update

An update for perl-Net-DNS is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records

A flaw was found in Net::DNS versions before 1.57 for Perl. An attacker can cause a denial of service DoS by sending a specially crafted DNS message with a misplaced Transaction Signature TSIG record. When a system using Net::DNS, such as a forwarder or proxy, attempts to re-encode this message, ...

Important: Red Hat Security Advisory: perl-Net-DNS security update

An update for perl-Net-DNS is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 8 : perl-Net-DNS (RHSA-2026:68787)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:68787 advisory. The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DN...

RHEL 9 : perl-Net-DNS (RHSA-2026:68786)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68786 advisory. The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DN...

CVE-2026-93450

CVE-2026-93450 affects go-openapi/swag (the jsonutils component) in versions before 0.27.1 . The root cause is unbounded recursion with no depth limit in ordered JSON marshal and unmarshal operations. A remote, unauthenticated attacker can submit a deeply nested JSON document to any service that ...

CVE-2026-93450 go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...