GHSA-4VH2-39RQ-RQ8J Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

ipeeyoupeewepee

ipeeyoupeewepee सार्वजनिक इंटरनेट पर मौजूद होस्टों अधिकतर Cisco राउटर के लिए एक स्कैनर और आक्रमण सूट, जो IP-in-IP और GRE प्रोटोकॉल में अनएथेंटिकेटेड पैकेट अग्रेषित करते हैं। यह कमजोरी, जिसे "टनलिंग प्रोटोकॉल का असुरक्षित कार्यान्वयन" कहा जाता है, CVE-2020-10136 और CVE-2024-7595 के तहत ट्रैक की जा...

CVE-2021-33959

CVE-2021-33959 यह देखा जा सकता है कि Plex सेवा चार udp पोर्ट 32410, 32412, 32413 और 32414 पर सुनती है। आक्रमण पेलोड के विश्लेषण और संदर्भ के लिए डिवाइस क्वेरी अनुरोध के संदेश प्रारूप का उपयोग करके, हम M-SEARCH HTTP/1.1 के आक्रमण पेलोड के साथ udp पैकेट इन पोर्ट्स पर भेजने के लिए सॉफ्टवेयर लिखते है...

callstranger-detector

حزمة Zeek تكتشف محاولات CallStranger CVE-2020-12695 http://callstranger.com/ تحاول هذه الحزمة اكتشاف محاولات استغلال CallStranger CVE-2020-12695 وتسريب البيانات. تقوم بذلك من خلال البحث عن ثلاثة أشياء رئيسية: 1. أوامر SUBSCRIBE UPnP مع عنوان URL للإشعار يحتوي على عنوان IP ليس عنوان RFC1918 أو...

ntpscanner

ntpscanner يفحص خوادم NTP بحثًا عن ثغرة CVE-2013-5211 الخاصة بتضخيم هجمات حجب الخدمة الموزعة DDOS في NTP...

CVE-2026-97031

A flaw was found in Go's crypto/tls package. When processing Encrypted Client Hello ECH extensions, the server fails to reject multiple outer extension references as required by the protocol specification. A remote attacker can exploit this vulnerability by sending a specially crafted handshake...

CVE-2026-33033-PoC

CVE-2026-33033 PoC حرمان من الخدمة عبر تضخيم وحدة المعالجة المركزية بمسافات base64 فيMultiPartParser الخاص بـ Django يمكن لطلب HTTP واحد بحجم 2.5 ميجابايت أن يربك عامل Django لمدة 5 ثوانٍ ، محققًا تضخيمًا لوحدة المعالجة المركزية بنسبة 2,100x مقارنة بطلب عادي بنفس الحجم. لا يتطلب أي مصادقة...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

dns_amplification_scanner

DNS एम्पलीफिकेशन DDoS डिटेक्शन और वेरिफिकेशन टूल यह स्क्रिप्ट उन संभावित DNS सर्वरों की पहचान और सत्यापन करने के लिए डिज़ाइन की गई है जो DNS एम्पलीफिकेशन डिस्ट्रीब्यूटेड डिनायल-ऑफ-सर्विस DDoS हमलों में शोषण के लिए संवेदनशील हैं। यह Nessus जैसे स्वचालित भेद्यता स्कैनर की सीमाओं को संबोधित करता है,...

CVE-2026-22007-NTP-monlist-Amplification-over-IPv6

CVE-2026-22007 – تضخيم monlist في NTP عبر IPv6 كود البرنامج Python ntpamplifysim.py - NTP server responding to monlist without authentication import socket, struct def ntpmonlistresponse: Simplified NTP reply with many entries return b'\x00' 1200 large response server = socket.socketsocket.AFINET...

not-a-mused

not-a-mused إثبات مفهوم لثغرة 0day محلية في Muse https://muse.ai يمكن أن تسمح لعملية محلية غير مميزة بإعادة توجيه حركة الإملاء الخاصة بـ Muse وإساءة استخدام الثقة/الوصول الممنوح للتطبيق. ما الذي يوضحه يكشف Muse عن إعداد غير موثق: endovoyagerdictationendpoint يمكن لمهاجم محلي أو برمجية خبيثة تعديل...

CLEANSTART-2026-FQ60259 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings

Security vulnerability affects the apache-hive package. Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings...

yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

Summary LZ4FrameInputStream allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every time it reads a frame header. Because concatenated frames are read by default, an input made of many minimal empty frames forces about 8 MiB of zeroed heap allocation for every 11 inpu...

GHSA-GM45-99XC-R7WV yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

Summary LZ4FrameInputStream allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every time it reads a frame header. Because concatenated frames are read by default, an input made of many minimal empty frames forces about 8 MiB of zeroed heap allocation for every 11 inpu...

yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

LZ4FrameInputStream allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every time it reads a frame header. Because concatenated frames are read by default, an input made of many minimal empty frames forces about 8 MiB of zeroed heap allocation for every 11 input bytes...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

CVE-2026-106450 yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many...

CVE-2026-106450

Prior to version 1.11.4 , yawkat LZ4 Java is vulnerable to a resource exhaustion issue in the net.jpountz.lz4.LZ4FrameInputStream.readHeader() function. When processing a maximum-block-size frame header in the default concatenated-frame mode, the component allocates two new 4 MiB block buffers. A...

CVE-2026-106450 yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – تضخيم مصافحة QUIC عبر تجاوز التحقق من العنوان الكود البرمجي محاكاة بايثون quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating source address In real QUIC, the...