heffalump

Heffalump Heffalump is an endless honeypot that gives malicious bots nightmares. To use, in your robots.txt tell robots not to go to a certain URL, which heffalump is reverse proxying. Any web agent that does go to the URL will receive an endless stream of random data, which will overflow its...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 用于判断Citrix是否受CVE-2025-6543影响的脚本 citrix-cve-2025-6543-check.py 是一款 Python 3 命令行工具，用于识别存在 Citrix 于 2025 年 6 月发布的内存溢出漏洞 CVE-2025-6543 的 NetScaler ADC / Gateway 实例。 该工具专为 Oruss 团队的渗透测试人员和应急响应人员设计，可快速验证生产或实验环境（仅限获得事先授权的情况）。 主要特性 功能 详细说明 远程检测 通过 SNMP v2c sysDescr.0 读取设备版本，或可选地通过 SS...

Oracle Linux 8 : ELSA-2026-62667-0: / perl-DBI (ELSA-2026-626670)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-626670 advisory. - Fix stack overflow and buffer overflow in DBI.xs CVE-2026-9698 Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of...

EXP-CVE-2017-75

EXP-CVE-2017-75 このPythonスクリプトは、NGINXサーバーの特定の脆弱性（CVE-2017-75）をチェックし、悪用するために設計されています。これは、私が最近報告書を提出した公開脆弱性開示プログラムのために開発されました。 巧妙に細工されたRangeヘッダーを使用してオーバーフローを引き起こし、サーバーのメモリから機密情報を取得できるようにします。 機能 確認モード : 完全なエクスプロイトを実行せずに、ターゲットURLが脆弱かどうかを迅速に確認します。 エクスプロイトモード : ターゲットが脆弱な場合、この脆弱性を悪用してメモリ内容を取得しようとします。...

Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway. The vulnerability with identifier CVE-2026-19489 involves a memory overflow in NetScaler ADC and NetScaler Gateway when the products are configured as SIP ALG within a Large Scale NAT LSN group. This memory allocation...

CVE-2025-7775

CVE-2025-7775 内存溢出漏洞，可导致NetScaler ADC和NetScaler Gateway在以下配置下实现远程代码执行和/或拒绝服务：当NetScaler配置为网关（VPN虚拟服务器、ICA代理、CVPN、RDP代理）或AAA虚拟服务器时；或NetScaler ADC和NetScaler Gateway 13.1、14.1、13.1-FIPS及NDcPP：绑定IPv6服务或绑定IPv6服务器的服务组的类型为（HTTP、SSL或HTTPQUIC）的LB虚拟服务器；或绑定DBS IPv6服务或绑定IPv6...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. Redis improperly handles the resizing of memory buffers, which can lead to integer overflow, resulting in heap overflow and potential remote code execution. This issue has been fixed in versions 7.0.15 and 7.2.4...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fixed a potential memory overflow issue with staticcommandline. We allocated memory of size ‘xlen + strlenbootcommandline + 1 for staticcommandline. However, the strings copied into staticcommandline were actually fr...

Astra Linux – Vulnerability in net-snmp

Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX in NET-SNMP-VACM-MIB could lead to an out-of-bounds memory access. A user with read-only credentials could exploit this issue. Version 5.9.2...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk.Authenticated users who execute specially crafted SETRANGE and SORTRO commands can trigger an integer overflow, causing Redis to attempt to allocate an impossible amount of memory and result in a Memory Out of Control OOM panic. This issue...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696939)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-63.21, or 14.1 prior to 14.1-73.32, or 13.1-FIPS/NDcPP prior to 13.1-37.277, or 14.1-FIPS prior to 14.1-73.32. It is, therefore, affected by multiple vulnerabilities: -...

CVE-2026-75841 ArcadeDB before 26.8.1 Denial of Service via range()

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2026-74380

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommumapsgtable return value check Commit "iommu: return full error code from iommumapsgatomic" changed iommumapsgtable to return an ssizet and negative values in error cases, rather than a sizet and a zero. pinj...

UBUNTU-CVE-2026-74380

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommumapsgtable return value check Commit "iommu: return full error code from iommumapsgatomic" changed iommumapsgtable to return an ssizet and negative values in error cases, rather than a sizet and a zero. pinj...

AlmaLinux 9 : bind (ALSA-2026:54510)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54510 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-133...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

CVE-2026-68320

In the Linux kernel, the following vulnerability has been resolved: sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses SCTPNUMCHUNKTYPES 20 as the capacity limit for ep-authchunklist, allowing it to hold up to 20 chunk entries paramhdr.length up to 24. Howeve...

CVE-2026-59088

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum intege...