CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

CLEANSTART-2026-OP19788 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU

CVE-2026-78667 affects multiple packages. When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU. See references for individual vulnerability details...

DomainFrontDiscover

DomainFrontDiscover Scripts and results for finding domain frontable CloudFront domains A walkthrough of what happened here can be found at https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt A list of 93k+ domains that were...

BlueCloud

Overview Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK +...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...

Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

net/http: golang: golang: Denial of Service via crafted HTTP Range headers

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2017-7529

CVE-2017-7529 Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Installation $ git clone...

sslScrape

sslScrape SSLScrape | A scanning tool for scaping hostnames from SSL certificates. Written by Peter Kim and @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Usage | python sslScrape.py CIDR Range E.X | python sslScrape.py 10.100.100.0/24...

net/http: golang: golang: Denial of Service via crafted HTTP Range headers

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

net/http: golang: golang: Denial of Service via crafted HTTP Range headers

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...

reachability

-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...

-Exploit-CVE-2017-7529

-Exploit-CVE-2017-7529 CVE-2017-7529: Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Usage python3 cve-2017-7529.py...

cve-2023-50164

CVE-2023-50164 Vulnerable versions Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versions where the vulnerability is fixed Struts 2.5.33 Struts 6.3.0.2 Search Script Windows/PowerShell For PowerShell 5.1 and newer. Written by Kjetil Sigvartsen at Norsk...

MS15-034

MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...