killosx

killosx Use Apple CoreText exploit CVE-2012-3716 and launch an AP to affect all vulnerable Apple devices within wifi range. Installation: Run 'make install' in the killosx directory. killosx can now be run from anywhere with 'killosx'. Usage: killOSX Usage - killosx -i wlan0 Run exploit on wlan0...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help message and exit...

scanginx

Scanginx Scanner For Nginx - Remote Integer Overflow Vulnerability Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943 Modifications The original exploit is written for Linux, so I attempted to reproduce it on...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

CVE-2026-98685

A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to information disclosure when extending a file via a clone range operation. Because the client fails to discard cached memory pages that straddle the original end-of-file boundary, data previously written past the...

CVE-2026-98686

A flaw was found in the Linux kernel's SMB Server Message Block client. When extending a file using a zero-range operation, cached memory pages past the previous end-of-file boundary are not properly discarded. A local user can exploit this vulnerability to view stale or previously buffered data...

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

CLEANSTART-2026-PL25237 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU

CVE-2026-78667 affects multiple packages. When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU. See references for individual vulnerability details...

safer-eval-cve-CVE-2019-10760

safer-eval-cve-CVE-2019-10760 The following proof-of-concept POC exploit addressing safer-eval version 1.3.1 and below is the first publicly known payload to attack this version range. Contributing Please consult CONTRIBUTING for guidelines on contributing to this project...

RLSA-2026:86093 Important: golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http:...

RLSA-2026:86196 Important: golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http:...

asf__commons-io_CVE-2021-29425_2-6

Apache Commons IO The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Documentation More information can be found on the Apache Commons IO homepage. The JavaDoc can be browsed. Questions...

CVE-2017-7529

CVE-2017-7529 Description Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Source:...

CVE-2026-113239

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. The issue stems from a range validation error in the SiteIsolation...

net/http: golang: golang: Denial of Service via crafted HTTP Range headers

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...

nginx

CVE-2017-7529 당승표@portfolio10 Summary This lab exercise reproduces the cache vulnerability CVE-2017-7529 that occurs during the Nginx server's Range request handling process, and the actual behavior of the vulnerability Vulnerability: Possible exposure of cached data due to an error in Nginx Rang...

Mongodb-Redis-scan

Mongodb-Redis-scan mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis. This script was written for a previous requirement, and now it is shared for everyone to learn and...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive detection tool for identifying potential exposure to CVE-2026-24061 , a vulnerability affecting certain versions of GNU inetutils telnet. This project is designed for DevOps pipelines , infrastructure audits , and defensive security...

SUSE CVE-2026-113239

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...