katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

spring-retry-toolkit

This project provides declarative retry support for Spring applications. It is used in Spring Batch, Spring Integration, and others. Imperative retry is also supported for explicit usage. Version The version fix spring-retry with 2.0.13 for java8 and spring4 or spring5, For more information, plea...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Siri快捷指令和共享网页凭据中的不当输入验证 发现者： Joseph Goydish II 发现日期： 2025年8月20日 严重性： 高 执行摘要 本报告概述了一个影响Apple Siri快捷指令和共享网页凭据（SWC）框架的高严重性漏洞链。这些缺陷允许恶意构造的载荷在后台静默执行，绕过输入验证、沙箱和用户提示。这些工作流在重启和重新启动后仍然存在，并且可以在没有适当授权的情况下触发敏感系统守护进程。 关键后果 恶意构造的快捷指令工作流在后台静默执行 来自系统守护进程的未授权沙箱扩展请求 swcd 中的持续重试风暴（观察到71+次重试） TLS信任降级——容忍证书不匹配...

CVE-2019-9053

CVE-2019-9053 Daniele Scanu 的 SQL 注入漏洞利用代码改进版 已应用以下更改： 新增时间控制变量 -t 或 --time，允许用户延长 SQL 注入的计时（在主机间网络连接存在数据包传输延迟时有用） 添加网络异常处理：在数据包/连接/响应丢失时重试（原版 Python 会抛出异常，需要重新开始） 在获取哈希/盐值时无需使用完整字典，因为其以十六进制表示，因此使用精简字典 0123456789abcdef 以加快速度 Python3 要求 hashlib.md5 参数必须编码，因此哈希查找函数已相应重写 尽情使用吧！...

retryabledns

Resolvedor DNS reintentable Basado en miekg/dns y libremente inspirado por bogdanovich/dnsresolver. Características Soporta tanto los resolvedores DNS por defecto del sistema como los proporcionados por el usuario Reintenta las solicitudes DNS en caso de errores de E/S, tiempos de espera o fallos...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Rocky Linux 10.1 [CIQ] Security Update: mod_md / mod_md-debuginfo / mod_md-debugsource (crlsa-2025_23738)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523738 advisory. modmd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-55753 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (crlsa-2025_23732)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523732 advisory. httpd: Apache HTTP Server: CGI environment variable override CVE-2025-65082 modmd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-557...

EUVD-2026-71617

undici vulnerable to Denial of Service via orphaned RetryHandler response body...

NPM: undici vulnerable to downstream response splitting via retry interceptor

NPM: undici vulnerable to downstream response splitting via retry interceptor vulnerability discovered by ? in WordPress Npm undici versions 6.28.1...

EUVD-2026-71661

undici vulnerable to downstream response splitting via retry interceptor...

CLEANSTART-2026-TI91814 undici's retry handler can leave an already-exposed response body pending forever

Security vulnerability affects the langfuse package. undici's retry handler can leave an already-exposed response body pending forever...

Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-3107)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3107 advisory. undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and...

undici: undici: HTTP response splitting via retry interceptor

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...

CVE-2026-94450 Potential denial of service when configured to send Retry packets in s2n-quic

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packet...

CVE-2026-94450 Potential denial of service when configured to send Retry packets in s2n-quic

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packet...

CVE-2026-94450 Potential denial of service when configured to send Retry packets in s2n-quic

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packet...

CVE-2026-94450

The s2n-quic library, version 1.88.0 and earlier , contains a vulnerability where improper validation of the Destination Connection ID length can be exploited. An unauthenticated remote user can trigger a denial of service by shutting down a server endpoint using a single crafted UDP datagram . T...

CVE-2026-94450: Improper Validation of Specified Quantity in Input

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packet...