fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not ap...

CVE-2026-66858

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the protocol skip routine. Specifically, multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can...

hget

hget このプロジェクトは、Golangを学んで何か役に立つものを作るための個人プロジェクトです。 ビルドステータス : インストール $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install バイナリファイルは ./bin/hget にビルドされます。/usr/bin や /usr/local/bin にコピーして、さらに alias wget hget とエイリアスを設定すれば、wget を完全に置き換えることもできます :P 使い方 hget Url ...

CVE-2026-29000

CVE-2026-29000 漏洞利用生成器（Rust） 本仓库包含一个专门用于利用 CVE-2026-29000 的 Rust 实现，该漏洞是 pac4j-jwt 中的一个身份验证绕过漏洞。该漏洞源于当 PlainJWT（alg: none）嵌套在加密的 JWE 容器中时，会发生“签名验证跳过”。 功能特性 自动获取 JWKS：直接从 /api/auth/jwks 端点获取目标服务器的 RSA 公钥。 构造无签名 JWS：使用 None 算法构造带有管理权限声明（ROLEADMIN）的 JWT。 JWE 封装：使用 RSA-OAEP-256 和 A128GCM...

CVE-2026-60137-With-Skip-SSL

CVE-2026-60137-With-Skip-SSL 添加 --insecure 以跳过 SSL Original-without-skip-ssl : https://github.com/ZephrFish/wp2shell-scanner...

CVE-2025-29927-NextJs-Middleware-Simulation

CVE-2025-29927: Next.js ミドルウェア認証バイパスシミュレーション このリポジトリは、Next.js の重大な脆弱性である CVE-2025-29927 の悪用を実演します。この脆弱性により、攻撃者はミドルウェアベースの認証チェックをバイパスできます。問題は、内部の x-middleware-subrequest HTTP ヘッダーの不適切な処理に起因し、保護されたルートへの不正アクセスを可能にします。 ⚠️ 免責事項...

EUVD-2026-90195

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/authoidcprovider.py decodes the idtoken returned by the identity provider's token endpoint using jose.jwt.getunverifiedclaims...

SUSE CVE-2026-67242

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

CVE-2026-100704

Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy policies.kyverno.io/v1beta1 evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource...

DEBIAN-CVE-2026-67242

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

CVE-2026-67242

The rabbitmq-server messaging broker contains an authentication bypass vulnerability in versions 4.2.0 through 4.2.8 and 4.3.3 . When configured with OAuth 2.0 authentication, the software fails to properly validate token expiration timestamps if they are represented as floating-point numbers (pe...

EUVD-2026-87158

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

CVE-2026-67242 RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

Linux Distros Unpatched Vulnerability : CVE-2026-67242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp...

PT-2026-97924

Name of the Vulnerable Software and Affected Versions minimp3 version ea99364f Description An integer overflow occurs in the mp3dec skip id3v1 function when the software parses the APEv2 tag-size field. An integer overflow is a condition where an arithmetic operation attempts to create a numeric...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables – Do not compare internal table flags during updates. If a table update does not modify the flags, skip the transaction...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sctp: A potential overflow issue in sctpifwdtsnskip has been fixed. Currently, when using sctpwalkifwdtsn to traverse ifwdtsnskip, it only checks the position pos against the end of the chunk. However, the data remaining at the...