http-mcp-bridge

HTTP MCP Bridge Этот проект реализует HTTP-сервер, который выступает в роли моста между HTTP/1.1-запросами и удалённым MCP-сервером, используя Python-библиотеку mcp GitHub. Основная цель этой инициативы — дать возможность использовать HTTP-инструменты безопасности для тестирования удалённых...

dymerge

Простой, но мощный инструмент, написанный исключительно на Python, который объединяет заданные списки слов в один динамический словарь, который затем можно использовать в качестве боеприпасов для успешной атаки по словарю или перебором. Совместим с Python 2.6 и 2.7. Автор: Nikolaos Kamarinakis...

DivideAndScan

DivideEt Impera And Scan и также объединяем результаты сканирования Рекомендуемые проекты NixOS| ---|--- NixOS| offsec.tools D ivideA ndS can используется для эффективной автоматизации рутинного сканирования портов путём разделения процесса на 3 фазы: 1. Обнаружение открытых портов для набора...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Обзор CVE-2026-49975 — это уязвимость типа Отказ в обслуживании DoS в Apache HTTP Server. Уязвимость возникает в пути обработки HTTP/2 запросов, где несколько полей заголовка cookie могут быть объединены без правильного учёта в...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Бомба ★ CVE-2026-49975 HTTP/2 Бомба PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Обзор CVE-2026-49975 — это уязвимость типа Отказ в обслуживании DoS в Apache HTTP Server. Уязвимость возникает в пути обработки запросов HTTP/2, где...

CVE-2026-6307

CVE-2026-6307: Путаница типов V8 JS-to-Wasm → RCE на Chrome 146 Локальное воспроизведение и эксплуатация путаницы типов при деоптимизации V8 JS-to-Wasm, описанной Nebula, доведённая до запуска xcalc из рендерера Chrome for Testing 146.0.7680.165 ошибка исправлена в 147.0.7727.101. Все полезные...

wordreaper

プロジェクトについて このツールは、CSSセレクタを外科的精度で活用し、強力なパスワードクラッキングのためのスマートで焦点を絞ったワードリストをスクレイピング・生成するために設計されています。 機能概要 HTMLスクレイピング 正確なCSSセレクタを使用してテキストを抽出 任意のHTMLソースからのターゲット指定スクレイピングに対応 GitHub/Gist/CVSワードリスト取得 GitHubリポジトリ、Gist、またはCVSソースから直接rawファイルを取得 コミュニティ管理のワードリストの自動統合を可能にします プレーンテキストスクレイピング シンプルな改行ベースのテキストリストを解...

The vulnerability of the aggregation merging processing mechanism between shards of the MongoDB database management system allows a attacker to cause a service failure.

The vulnerability of the aggregation merging mechanism between shards in the MongoDB database management system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents. When merging very long extents, we try to assign as much length as possible to the first extent. However, this is unnecessarily complicated and not really worth the effort. Moreover,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tls: Stop recv if the initial processrxlist contains a record that is not of the DATA type. If there is a record on rxlist that is not of the DATA type, and there is another record of the same type still in the queue, we will mer...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fixed the null-ptr-deref issue in mreplace in raid10syncrequest. There are two checks for ‘mreplace’ in raid10syncrequest. In the first check, ‘needreplace’ will be set, and ‘mreplace’ will be used if there is no fault...

DEBIAN-CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-86428 commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-86428 commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-86428

PHP League CommonMark (versions 1.5.0 through before 2.10.0 ) is affected by a denial-of-service vulnerability in the AttributesExtension . When processing Markdown containing numerous distinctly-named attributes, the extension performs quadratic-time attribute merging and filtering , consuming d...

EUVD-2026-72386

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

Linux Distros Unpatched Vulnerability : CVE-2026-86428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes...

Missing permission check allows canceling builds

The build command of the Jenkins CLI can be invoked with the -s flag to wait for a triggered build to complete, canceling the build when the CLI client is interrupted. Jenkins merges multiple requests to build the same job with the same parameters into a single queue item. In Jenkins 2.579 and...

Allocation of Resources Without Limits or Throttling

Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Allocation of...