WPAxFuzz

مُختبِر Wi-Fi شامل الإبلاغ عن ثغرة · طلب ميزة جدول المحتويات 1. حول المشروع 2. اختبار إطارات الإدارة والتحكم والبيانات المتطلبات والتبعيات الوصف 3. اختبار تبادل SAE 4. وحدة هجوم الحرمان من الخدمة الوصف 5. الثغرات 6. الأعمال ذات الصلة 7. الترخيص 8. الاتصال 9. الشكر والتقدير حول المشروع تستطيع هذه...

ufonet

Сайт: https://ufonet.03c8.net Описание: UFONet — это свободное программное обеспечение, P2P- и криптографический -деструктивный инструментарий-, который позволяет выполнять DoS- и DDoS-атаки; на уровне 7 APP/HTTP через эксплуатацию векторов Open Redirect на сторонних сайтах, действуя как ботнет, ...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

htshells

HTSHELLS - صدفات ويب مكتفية ذاتيًا وهجمات أخرى عبر ملفات .htaccess. تُسمى الهجمات بالطريقة التالية: module.attack.htaccess، وتُجمَّع حسب نوع الهجوم في مجلدات. اختر ما تحتاجه وانسخه إلى ملف جديد باسم .htaccess، وافحص الملف لمعرفة ما إذا كان يحتاج إلى تعديل قبل رفعه. تنفذ صدفات الويب الأوامر من معا...

xerosploit

Xerosploit Xerosploit عبارة عن مجموعة أدوات لاختبار الاختراق تهدف إلى تنفيذ هجمات الرجل في المنتصف لأغراض الاختبار. تتضمن وحدات متنوعة تتيح تنفيذ هجمات فعّالة، كما تسمح بشن هجمات حجب الخدمة وفحص المنافذ. مدعوم بواسطة bettercap و nmap. التبعيات nmap hping3 build-essential ruby-dev libpcap-dev...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

PT-2026-76699

In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters...

CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

EUVD-2026-57548

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

CVE-2026-11937

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Verify Access Container 10.0 through 10.0.9.2 Reverse Proxy in certain configurations is vulnerable to a denial of...

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

CVE-2026-67296

A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...

CVE-2026-20263

A vulnerability in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP...

CVE-2026-13586 PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware

CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit Advanced CVE-2023...

Erlang/OTP 23.2 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Certificate Chain Cycle DoS (CVE-2026-58227)

The version of Erlang/OTP installed on the remote host is 23.2 prior to 27.3.4.15, 28.0 prior to 28.5.0.4, or 29.0 prior to 29.0.4. It is, therefore, affected by a vulnerability: - The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain durin...

CVE-2026-67184 TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-66754 Rouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encoding

Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::removeprefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix whi...