metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix Fix forundefined method each in Metasploit’s bailiwickeddomain.rb CVE-2008-1447 DNS cache poisoning module 🔎 Problem While testing CVE-2008-1447 using Metasploit, the original module crashed with: undefined method each for an instance of IPAddr NoMethodError Thi...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

m4ngl3m3

m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...

EUVD-2026-91987

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

Linux Distros Unpatched Vulnerability : CVE-2026-91137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP...

CVE-2026-91137

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91372

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-91137 Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-91137

The Apache Thrift PHP bindings are vulnerable to Improper Validation of Specified Quantity in Input , Allocation of Resources Without Limits or Throttling , and Excessive Iteration vulnerabilities. This issue specifically affects versions before 0.25.0 . The root cause involves improper handling ...

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the PullImage process. An attacker can cause excessive CPU and memory consumption by supplying a crafted OCI image index with deeply nested or heavily fanned-out descriptor graphs, leading to prolonged stalls and...

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the PullImage process. An attacker can cause excessive CPU and memory consumption by supplying a crafted OCI image index with deeply nested or heavily fanned-out descriptor graphs, leading to prolonged stalls and...

CVE-2026-98007

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpfloop iteration counts bpfloop declares its nrloops argument as ARGANYTHING. Privileged programs may pass pointer values to such arguments, so checkfuncarg lets a pointer-valued R1 reach the helper-specif...

SUSE CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

DEBIAN-CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

AZL-103772 CVE-2026-97433 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

UBUNTU-CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97433

The Linux kernel contains a vulnerability in the nvme driver related to the handling of FDP configuration descriptors. A lack of size validation while walking the FDP configurations log could allow a descriptor with dsze == 0 or a descriptor located past the log end to cause unbounded iteration o...

EUVD-2026-86046

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...