132 matches found
duplicut
Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...
Massive-Subdomain-Enumerator
Massive-Subdomain-Enumerator This tool uses a combination of dictionary-based wordlists brute-force and DNS resolution checks to verify the existence of subdomains. Features Wordlist Processing: Capable of handling large wordlists efficiently. Multi-threading: Boosts search speed by using multipl...
MiracleLinux 9 : brotli-1.0.9-10.el9_8 (AXBA:2026-2004:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2004:03 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compress...
CentOS Linux 7 [TuxCare] Security Update: python3-pip Multiple Vulnerabilities (CENTOS7:CLSA-2026:1775723090)
The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1775723090 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly...
Rocky Linux 9.6 [TuxCare] Security Update: python3.11-urllib3 Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770046658)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770046658 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in t...
AlmaLinux 9.6 [TuxCare] Security Update: python3.11-urllib3 Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770046658)
The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770046658 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the...
SUSE CVE-2026-55768
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum...
CVE-2026-14539 Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to cause a denial of service DoS. The /mcp endpoint handler reads incoming payloads directly into system memory using a...
MAL-2026-4795 Malicious code in massive (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d8dea3e47a2bd45fc796f33fc582956aec2be887add9672fd5eccc91c2135d Package self-describes as the 'Official Massive formerly Polygon.io REST and Websocket client,' a false rebrand claim — Polygon.io has not changed...
PT-2026-23067
Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.6 Description NanoMQ MQTT Broker, an Edge Messaging Platform, is susceptible to a heap memory corruption issue in version 0.24.6. This occurs when a specific traffic pattern is generated, combining high-frequency...
Malicious code in massive-yellow-marten (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117242
Malicious code in massive-yellow-marten npm...
EUVD-2025-90126
Malicious code in massiveraccoonz3n npm...
EUVD-2025-90128
Malicious code in massivebassz3n npm...
Malicious code in massive_parrot_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7a795b4ab4dbea26afe35095a1d0100bef5f3f82113998c60db5a3013a09fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-115758 Malicious code in massive_raccoon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81019e9318c382cd501d02591c906e2612b06b0027e936eaeaf357a49fe0483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76327
Malicious code in massiverat-appteadev npm...
EUVD-2025-81281
Malicious code in massivespoonbill0xrequest npm...