turbo-intruder

Turbo Intruder Turbo Intruder 是一个 Burp Suite 扩展，用于发送大量 HTTP 请求并分析结果。它旨在通过处理需要异常速度、持续时间或复杂性的攻击来补充 Burp Intruder。以下特点使其脱颖而出： 快速 - Turbo Intruder 使用从头开始手写的 HTTP 栈，注重速度。因此，在许多目标上，它可以严重超越甚至时尚的异步 Go 脚本。 可扩展 - Turbo Intruder 可以实现平坦的内存使用，从而实现可靠的多天攻击。它还可以通过命令行在无头环境中运行。 灵活 - 使用 Python...

CVE-2026-43499-Redmi-Turbo5

Exploit CVE-2026-43499 para Redmi Turbo 5 Esta librería de precarga está construida a partir del código fuente de duchamp-root. ⚠️ ADVERTENCIA: Solo para fines educativos y de investigación de seguridad autorizada. Este repositorio proporciona un exploit de prueba de concepto para CVE-2026-43499...

Callisto

Callisto 智能自动化二进制漏洞分析工具 演示： Callisto 是一个智能自动化二进制漏洞分析工具。其目的是自主反编译提供的二进制文件，并遍历输出的伪代码，寻找该伪 C 代码中潜在的安全漏洞。Ghidra 的无头反编译器驱动了二进制反编译和分析部分。伪代码分析首先由 Semgrep SAST 工具执行，然后传递给 GPT-3.5-Turbo 以验证 Semgrep 的发现，并可能识别额外的漏洞。 该工具旨在辅助二进制分析和零日漏洞发现。其输出旨在帮助研究人员识别二进制文件中可能感兴趣的区域或易受攻击的组件，随后可通过动态测试进行验证和利用。它当然无法捕获所有漏洞，但通过...

haptyc

Haptyc 测试生成框架 Haptyc 是什么？ Haptyc 是一个 Python 库，旨在为 Turbo Intruder 添加载荷位置支持和狙击手/集束炸弹/攻城锤/草叉攻击类型。虽然 Haptyc 能够很好地实现这些目标，但它也提供了一种更简单的方式来表达常规测试序列。尽管该库是为 Turbo Intruder 设计的，但它并不强依赖 Turbo Intruder，可以在任何需要在 Python 环境中生成测试的地方使用。遗憾的是，由于 Haptyc 是为 jython 解释器构建的，目前仅支持 Python 2.7（不过未来的更新将解决这个问题）。 什么是 Haptyc 标签...

Astra Linux – Vulnerability in libjpeg-turbo

Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...

Astra Linux – Vulnerability in Chromium

In libjpeg-turbo, a vulnerability existed in versions prior to 94.0.4606.54, allowing a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in libjpeg-turbo

LibJPEG 9c has a major issue with a large loop, as the readPixel function in rdtarga.c improperly handles EOF situations...

GHSA-2R5Q-H53F-9RP3 @yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

Unauthenticated Network-Exposed Turborepo Task Execution via /api/run Summary @yeger/turbo-graph starts its embedded Next.js server without binding to the loopback interface, causing it to listen on all network interfaces 0.0.0.0:29312 by default. The /api/run HTTP endpoint exposed by this server...

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

Unauthenticated Network-Exposed Turborepo Task Execution via /api/run Summary @yeger/turbo-graph starts its embedded Next.js server without binding to the loopback interface, causing it to listen on all network interfaces 0.0.0.0:29312 by default. The /api/run HTTP endpoint exposed by this server...

CVE-2021-1569

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:35+00:00| seen| https://t.me/hackingAttack/13351 2026-09-02 01:03:11+00:00| seen| https://t.me/hackingAttack/13351 2026-09-08 02:00:05+00:00| seen| https://t.me/hackingAttack/13351 2026-09-09 00:00:46+00:00| seen|...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

UBUNTU-CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

EUVD-2026-66663

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero flaw in its PNG loader . When a valid indexed-color PNG image with a non-gray palette is processed through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, a division-by-zero is triggered in alloc_sarray(), causing a SIG...

Linux Distros Unpatched Vulnerability : CVE-2026-75466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palett...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

EUVD-2026-65700

In Dradis Community Edition, the ProvidersController and AgentsController gate their adminrequired beforeaction on defined?Dradis::Pro, a constant that is never defined in CE, so the authorization check is never applied. As a result, any authenticated non-admin user can create an AI provider...

Astra Linux – Vulnerability in libjpeg-turbo

All versions of Libjpeg-turbo have a stack-based buffer overflow in the “transform” component. A remote attacker can send a malformed JPEG file to the service, causing arbitrary code execution or denial of service for the target service...