nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

GHSA-J6QF-3M9C-VWJ3 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, zot, step-issuer-fips, falcoctl-fips, kubescape-server-fips, fluxcd-kustomize-mutating-webhook, gitea, cortex-fips, fluxcd-kustomize-mutating-webhook-fips, dapr, drone-fips, gotrue, cg, nuclio-controller-fips, llm-d-router, rclone-fip...

CVE-2026-114437 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, zot, step-issuer-fips, falcoctl-fips, kubescape-server-fips, fluxcd-kustomize-mutating-webhook, gitea, cortex-fips, fluxcd-kustomize-mutating-webhook-fips, dapr, drone-fips, gotrue, cg, nuclio-controller-fips, llm-d-router, rclone-fip...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

GHSA-6WMF-3R64-VCWV Crass : Large numeric exponents cause CPU and memory denial of service

Impact Crass converts CSS scientific notation number values with unbounded exponentiation before it clamps the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS strings can be forced to spend disproportionate CPU and memory parsing a tiny input, possibly resulting...

Crass : Large numeric exponents cause CPU and memory denial of service

Impact Crass converts CSS scientific notation number values with unbounded exponentiation before it clamps the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS strings can be forced to spend disproportionate CPU and memory parsing a tiny input, possibly resulting...

Linux Distros Unpatched Vulnerability : CVE-2026-110676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum,...

CVE-2026-110676

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...

EUVD-2026-104557

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...

CVE-2026-110676

The Cpanel::JSON::XS module for Perl (versions before 4.80 ) is vulnerable to memory exhaustion and CPU exhaustion when processing untrusted JSON data with the allow_bignum option enabled. The root cause is that while decoding numbers with exponents is efficient (using Math::BigFloat ), encoding ...

CVE-2026-110676 Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...

CVE-2026-110676 Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...

CVE-2026-110676: Asymmetric Resource Consumption (Amplification)

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...

PT-2026-117574

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.80 Description Memory exhaustion can occur when encoding exponent notation as full decimal digits while using the allow bignum setting. When allow bignum is enabled, JSON numbers with fractions or exponents...

Astra Linux – Vulnerability in libfastjson

JSON-C version 0.14 has an integer overflow issue, and there is a risk of out-of-bounds write operations through a large JSON file, as demonstrated by the printbufmemappend function...

CVE-2026-101899

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...

axios: Axios: Information disclosure via improper CIDR proxy bypass handling

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...

axios: Axios: Information disclosure via improper CIDR proxy bypass handling

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...