heffalump

Heffalump Heffalump is an endless honeypot that gives malicious bots nightmares. To use, in your robots.txt tell robots not to go to a certain URL, which heffalump is reverse proxying. Any web agent that does go to the URL will receive an endless stream of random data, which will overflow its...

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Script to check if Citrix is vulnerable to CVE-2025-6543 citrix-cve-2025-6543-check.py is a Python 3 command-line script that identifies NetScaler ADC / Gateway instances vulnerable to the CVE-2025-6543 memory overflow published by Citrix in June 2025. Designed for pentesters...

CVE-2025-7775

CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...

Exploit for CVE-2026-107406

CVE-2026-107406 — Citrix NetScaler ADC / Gateway SAML memory...

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host ca...

Citrix NetScaler ADC and Gateway 14.1 Oracle Load-Balancer Checker

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 or 13.1-64.23 contain an Oracle load-balancer memory overflow vulnerability that can lead to unpredictable behavior or denial of service. This offline checker assesses operator-reported build and configuration evidence without contacting...

Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...

Citrix NetScaler ADC and Gateway Memory Overflow Checker

Citrix NetScaler ADC and Gateway versions before the vendor-provided fixed builds contain a memory overflow vulnerability when configured as a Gateway or AAA virtual server. This tool evaluates operator-reported version and configuration evidence offline...

NetScaler ADC and Gateway 14.1 LSN SIP ALG Memory Overflow

NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain an LSN SIP ALG memory overflow vulnerability. The supplied offline tool evaluates operator-reported build and configuration evidence...

Citrix NetScaler ADC and Gateway 14.1 Before 14.1-73.37 Memory Overflow Checker

Citrix NetScaler ADC and Gateway versions before the vendor-fixed builds contain a memory overflow vulnerability under specified non-HTTP L7 deployment conditions. This offline Python tool evaluates operator-reported version and configuration evidence without contacting appliances or testing...

Citrix NetScaler ADC / Gateway 14.1 LSN SIP ALG Memory Overflow

Citrix NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain a memory overflow condition when SIP ALG is enabled on an LSN group. FIPS and NDcPP fixed-build variants are documented...

NetScaler ADC and Gateway 14.1-73.36 DTLS Check

NetScaler ADC and Gateway versions before the listed fixed builds contain a DTLS-enabled memory overflow vulnerability leading to remote code execution or denial of service. This offline tool assesses reported versions and exported DTLS configuration...

Citrix NetScaler ADC / Gateway 14.1 Memory Corruption

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a memory overflow issue when configured with an Oracle-type load-balancing virtual server...

Citrix NetScaler ADC and Gateway 14.1 and 13.1 Non-HTTP L7 Memory Overflow

Citrix NetScaler ADC and NetScaler Gateway versions before 14.1-73.37 and 13.1-64.23, including applicable FIPS and NDcPP builds, contain a memory overflow vulnerability when configured with a non-HTTP L7 protocol feature...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check A non-destructive self-checking toolset for C...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142340 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving...

National Security Agency Ghidra Software Reverse Engineering Framework Resource Management Error Vulnerability

The National Security Agency’s Ghidra Software Reverse Engineering Framework versions 10.2 through 12.1.4 contain resource management vulnerabilities. These vulnerabilities stem from the ElfHeader class in the ELF loader, which allocates arrays based on unvalidated extended header and program...

NetScaler ADC and NetScaler Gateway Memory Overflow (CTX697191 / CVE-2026-107406)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.29, or 14.1 prior or equal to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.283, or 14.1-FIPS prior or equal to 14.1-73.41 FIPS. It is, therefore, affected by a vulnerabilit...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow We allocate memory of size ‘xlen + strlenbootcommandline + 1’ for staticcommandline, but the strings copied into staticcommandline are extracommandline and commandline,...