47 matches found
CVE-2026-73232
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232 ffuf denial of service (OOM) via HTTP response decompression bomb
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232 ffuf denial of service (OOM) via HTTP response decompression bomb
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232
CVE-2026-73232 affects ffuf (Go) prior to 2.2.0. The vulnerability arises when a malicious server uses HTTP responses with compressed content: the guard in pkg/runner/simple.go checks only Content-Length, while io.ReadAll can read gzip, brotli, deflate, or chunked bodies without a decompressed-si...
CVE-2026-73232 ffuf denial of service (OOM) via HTTP response decompression bomb
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
CVE-2026-73232: Improper Handling of Highly Compressed Data (Data Amplification)
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
PT-2026-70893
Name of the Vulnerable Software and Affected Versions ffuf versions prior to 2.2.0 Description A malicious target server can trigger an out-of-memory denial of service. This occurs because the response size guard in the pkg/runner/simple.go file only verifies the compressed Content-Length, wherea...
ffuf v2.2.1
ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...
Security-Writeups
🔐 Security Writeups Welcome! This repository contains my pers...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
The-Challenge-Soulmate- The "Soulmate" machine from HackTheBox...
Fedora: Security Advisory (FEDORA-2025-59acaa6bd9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 44 : ffuf (2025-e4abb78d54)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e4abb78d54 advisory. Automatic update for ffuf-2.1.0-1.fc44. Changelog Wed Aug 13 2025 Sandipan Roy - 2.1.0-1 - Update to version 2.1.0 - Update to 2.1.0 - Closes rhbz2061180...
Fedora 43 : ffuf (2025-59acaa6bd9)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-59acaa6bd9 advisory. Automatic update for ffuf-2.1.0-1.fc43. Changelog Wed Aug 13 2025 Sandipan Roy - 2.1.0-1 - Update to version 2.1.0 - Update to 2.1.0 - Closes rhbz2061180...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text - CVE-2022-...
Exploit for Improper Authentication in Fortinet Fortiproxy
CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass...
Fedora: Security Advisory for ffuf (FEDORA-2022-5ef0bd9a27)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for ffuf (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
