encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

hardcidr

hardCIDR Общая информация Скрипт на Linux Bash для обнаружения сетевых блоков диапазонов в нотации CIDR, принадлежащих целевой организации на этапе сбора информации в ходе теста на проникновение. Эта информация поддерживается пятью региональными интернет-реестрами RIR: ARIN Северная Америка RIPE...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

pwnage24mtk

pwnage24mtk 针对MTK设备的证书漏洞利用。MTK证书验证过程中存在一个逻辑缺陷。类似于CVE-2023-20696。可能已在6月被修补。 免责声明 本项目仅用于研究目的。使用前请确保已获得授权。禁止非法使用。不允许使用此漏洞利用程序提供付费服务。 对于MTK设备，预加载器preloader会验证bl2ext/lk/atf，然后跳转执行。这些镜像使用ASN.1证书进行签名。但在ASN.1解析过程中存在一个逻辑缺陷。 对于旧的V5/V6设备，证书内容通过bypassmode...

assets-from-spf

assets-from-spf SPFSender Policy Framework DNS 레코드에서 넷블록netblocks 및 도메인 이름을 파싱하는 Python 스크립트 파싱된 각 자산에 대해 스크립트는 자율 시스템 번호ASN 세부 정보도 찾아 출력합니다. 현재 출력은 JSON 형식으로만 인쇄됩니다 데모 스크린샷 서드파티 패키지 의존성 1. ipwhois 2. click 설정 이 저장소를 클론하세요 root@kitploit: $ git clone...

nodesub

NODESUB Nodesub ist ein Kommandozeilen-Tool zum Finden von Subdomains in Bug-Bounty-Programmen. Es unterstützt verschiedene Subdomain-Enumerationstechniken und bietet flexible Anpassungsmöglichkeiten. Funktionen Führen Sie die Subdomain-Enumeration mit CIDR-Notation durch unterstützt Eingabeliste...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

DNSHighJackMonitoring

Monitoraggio del dirottamento DNS Panoramica Script di tradecraft per facilitare il rilevamento di tentativi di dirottamento DNS dopo le divulgazioni di gennaio 2019. https://www.us-cert.gov/ncas/alerts/AA19-024A...

CVE-2026-80544

A flaw was found in the Linux kernel's s390/zcrypt component. The zcryptmsgtype6sendep11cprb function, responsible for handling EP11 CPRB Coprocessor Request Block domains, uses fragile struct overlays. This approach lacks proper ASN.1 Abstract Syntax Notation One encoding validation and bounds...

CVE-2026-13506

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit a vulnerability related to how the software processes lazy ASN.1 sequences, which can reset an internal nesting-depth guard. This issue could lead to a Denial of Service DoS, making the affected system or application...

EUVD-2026-66459

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

UBUNTU-CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

CVE-2026-80544 affects the Linux kernel s390/zcrypt subsystem, specifically the zcrypt_msgtype6_send_ep11_cprb() function. The vulnerability arises from fragile struct overlays used to read and modify the domain field in the EP11 CPRB payload, which assume a fixed structure without validating the...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...