BurpSuiteJSBeautifier

Burp Suite JSBeautifier Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of...

CVE-2026-53716

Envoy Gateway (open-source application gateway managing Envoy Proxy) has an unbounded gzip decompression vulnerability in getFileFromGZ within internal/wasm/httpfetcher.go. The function calls io.ReadAll on a gzip.Reader without limiting the decompressed output size. When a tenant-controlled Envoy...

CVE-2026-53659

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-body decompression functions impose no limit on decompressed size. An unauthenticated client can send a small...

CVE-2026-44162

fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...

pyxamstore

Xamarin AssemblyStore エクスプローラ pyxamstore これは、Pythonで書かれたassemblies.blob AssemblyStoreパーサーのアルファリリースです。このツールは、APKからassemblies.blobおよびassemblies.manifest Xamarinファイルのアンパックとリパッケージが可能です。 インストール インストーラスクリプトを実行してください: root@kitploit: python setup.py install その後、pyxamstoreを呼び出してツールを使用できます。 使い方 アンパック...

CVE-2026-44162

fluent-plugin-s3 (versions 0.7.0 to 1.8.4) is vulnerable to a decompression bomb in its in_s3 input plugin (CWE-409). The plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompression_size_limit. An attacker with permission to upload o...

CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`

fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...

CVE-2026-53659

http4k is a functional Kotlin HTTP toolkit. The vulnerability (CWE-409) exists in ServerFilters.GZip , RequestFilters.GunZip , and the underlying gzip decompression functions, which imposed no cap on decompressed size . An unauthenticated client can send a small gzip-encoded request body that exp...

EUVD-2026-77694

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-body decompression functions impose no limit on decompressed size. An unauthenticated client can send a small...

CVE-2026-53659 http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-body decompression functions impose no limit on decompressed size. An unauthenticated client can send a small...

mongobleed-detector

MongoBleed Detector CVE-2025-14847 MongoBleed のためのオフラインMongoDB分析ツール MongoDBデータを分析し、複数の検出モジュールを使用してCVE-2025-14847の悪用の可能性を特定するスタンドアロンLinuxコマンドラインツールです。 目次 概要 検出モジュール 要件 インストール 2つの動作モード モード1：ローカル分析 モード2：リモート収集 コマンドラインオプション 確信度レベル 出力例 テスト 注意点と制限事項 参考文献とクレジット ライセンス 概要 MongoBleed CVE-2025-14847...

mongobleed

mongobleed CVE-2025-14847 - MongoDB 未授权内存泄漏漏洞利用程序 这是针对 MongoDB zlib 解压漏洞的概念验证（PoC）利用程序，允许未授权攻击者泄漏服务器敏感内存。 漏洞 MongoDB 的 zlib 消息解压存在缺陷，返回的是分配的缓冲区大小，而非实际解压后的数据长度。攻击者可借此读取未初始化内存，方法如下： 1. 发送带有虚增 uncompressedSize 声明的压缩消息 2. MongoDB 根据攻击者的声明分配大型缓冲区 3. zlib 将实际数据解压到缓冲区起始位置 4. 该缺陷导致 MongoDB 将整个缓冲区视为有效数据 5...

CVE-2018-20250

exp 用于 从 WinRAR 中提取代码执行 poc 由 Ridter 提供 如何使用？ 你只需要安装 Python 3.7，并准备一个你想要运行的恶意文件，设置好你想要的参数，这个 exp 脚本会自动生成恶意归档文件 ！ 1. 设置你想要的参数 root@kitploit: ... ... 你想要的归档文件名 rarfilename = "test.rar" 你想要运行的恶意文件 evilfilename = "calc.exe" 你想要的解压路径，如下所示 targetfilename =...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

Astra Linux – Vulnerability in snappy-java

Snappy-Java is a Java port of the snappy, a fast C++ compressor/ decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, ...

CVE-2026-14266

CVE-2026-14266 PoC：7-Zip XZ 堆缓冲区溢出 PoC 生成器 用于复现 7-Zip 中 XZ 堆缓冲区溢出漏洞的概念验证（PoC）生成器。 该脚本会创建一个特制的 .xz 压缩包，旨在复现易受攻击的多线程 XZ 解压路径中的崩溃条件。 漏洞信息 CVE ：CVE-2026-14266 类型 ：堆缓冲区溢出 修复版本 ：26.02 或更高版本 组件 ：XZ 解码器 功能特性 从零开始生成有效的 .xz 压缩包 在易受攻击的 7-Zip 版本上复现崩溃条件 无需外部压缩包生成工具 使用方法 root@kitploit: python3 CVE-2026-14266.p...

CVE-2026-5132

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2026-5132

Mattermost versions 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22 fail to limit the size of unpacked SDP messages compressed with zlib in Calls WebSocket messages. An authenticated attacker (low privileges) can send many SDP messages that decompress to a large size, ca...

CVE-2026-5132 Unbounded zlib decompression in Calls SDP WebSocket messages

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2026-89321

Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...