zirgen

Zirgen Circuit Compiler Zirgen is a compiler for a domain-specific language, also called "zirgen", which creates arithmetic circuits for the RISC Zero proof system. For the most part, users of RISC Zero should be writing their zkApps in Rust and using our RISC-V zkVM rather than building them...

GHSA-6VHM-J9H7-F9GH AutoMapper: Uncontrolled Recursion with Constructor Parameters

Summary MaxDepth, whether set explicitly or applied by default 64 to self-referential type maps, was not enforced when the recursion goes through constructor parameters. Mapping a deeply nested source to a destination built through its constructor, such as a positional record, recurses without...

CVE-2026-128082 AutoMapper: Uncontrolled Recursion with Constructor Parameters

AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper increments type depth only after creating the destination, so recursive mapping performed through constructor parameters occurs before MaxDepth is counted. Destinations built...

CVE-2026-128081 AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth

AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper can recurse without an effective MaxDepth limit when mapping polymorphic graphs through Include or IncludeBase, runtime-typed object or interface members, nested Dictionary or...

CVE-2026-128081

The AutoMapper library for .NET is vulnerable to a Denial of Service attack due to uncontrolled recursion that bypasses the MaxDepth limit. This flaw occurs when mapping polymorphic graphs through Include , IncludeBase , runtime-typed members, nested Dictionary or ExpandoObject sources, or recurs...

CVE-2026-39376

CVE-2026-39376 CVE-2026-39376Infinite redirect loop DoS via meta-refresh chain Summary When parse fetches a URL that returns an HTML page containing a tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An...

CVE-2026-49341

The BACnet Stack C library for embedded systems contains a remotely reachable denial-of-service vulnerability in versions prior to 1.5.1 . The flaw specifically affects the default demo server built from the unmodified apps/server/main.c file. The root cause is identified as uncontrolled recursio...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...

CVE-2026-128238

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandl...

CVE-2026-128020

FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter that fails to detect circular references in PHP arrays. Passing a self-referential array to frankenphplog or returning one from a worker callback triggers a fatal Go stack overflow,...

CVE-2026-128020

Versions of FrankenPHP before 1.13.2 are vulnerable to a Denial of Service due to an uncontrolled recursion vulnerability in the PHP-to-Go array converter . The converter fails to detect circular references in PHP arrays; providing a self-referential array via frankenphp_log() or returning one fr...

CVE-2026-128020 FrankenPHP before 1.13.2 Denial of Service via Cyclic Array Conversion

FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter that fails to detect circular references in PHP arrays. Passing a self-referential array to frankenphplog or returning one from a worker callback triggers a fatal Go stack overflow,...

EUVD-2026-125082

FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter that fails to detect circular references in PHP arrays. Passing a self-referential array to frankenphplog or returning one from a worker callback triggers a fatal Go stack overflow,...

EUVD-2026-125054

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandl...

CVE-2026-128238

Scapy versions before 2.8.0 are vulnerable to an uncontrolled recursion vulnerability within the BER/ASN.1 decoder located in scapy/asn1/ber.py. An unauthenticated remote attacker can cause an application to crash by sending a single 833-byte packet containing 250 nested ASN.1 SEQUENCE structures...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

hacks

Hacks Hacky one-off scripts, tests etc...

CVE-2026-18464

CVE-2026-18464 — WP Maps Pro This repository is intended as a technical reference for an already disclosed vulnerability. It does not include a weaponized denial-of-service script. Overview Item| Details ---|--- CVE| CVE-2026-18464 Product| WP MAPS PRO Affected versions| 6.1.3 Fixed version| 6.1....

crass: crass: Denial of Service via excessive recursion when processing comments

A flaw was found in crass. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted stylesheet containing a large number of adjacent comments. Because the parser recursively processes comments when discarding them, handling these consecutive comments triggers excessiv...