CVE-2025-54801: Go Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder
Impact:
- Application panic or crash on malicious or malformed input.
- Potential denial of service (DoS) via memory exhaustion or server crash.
- Lack of defensive checks in the parsing code causes instability.
#cve
When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder.
The root cause is that the decoder attempts to allocate a slice of length idx + 1 without validating whether the index is within a safe or reasonable range. If idx is excessively large, this leads to an integer overflow or memory exhaustion, causing a panic or crash.
Impact:
- Application panic or crash on malicious or malformed input.
- Potential denial of service (DoS) via memory exhaustion or server crash.
- Lack of defensive checks in the parsing code causes instability.
#cve
Do It by Code
https://github.com/openai/harmony
OpenAI
Introducing gpt-oss
We’re releasing gpt-oss-120b and gpt-oss-20b—two state-of-the-art open-weight language models that deliver strong real-world performance at low cost. Available under the flexible Apache 2.0 license, these models outperform similarly sized open models on reasoning…
Do It by Code
.sh dig @ch.at "hello, who are you?" TXT +short
ExitCode: 0
"Hello! I\226\128\153m an AI language model created by OpenAI. How can I assist you today?"Btw there is a theory about LLMs becoming "lazy" when they are given instructions (e.g. system prompt) of a weekend's datetime (e.g. imagine you are passing it current datetime via its system prompt and today is a weekend, Sunday for example)
a business card that runs a fluid-implicit-particle(FLIP) simulation.
https://github.com/Nicholas-L-Johnson/flip-card
https://github.com/Nicholas-L-Johnson/flip-card
GitHub
GitHub - Nicholas-L-Johnson/flip-card
Contribute to Nicholas-L-Johnson/flip-card development by creating an account on GitHub.
🤓1
Torrent download tracker
https://iknowwhatyoudownload.com/
(idk how accurate it is tho. it's definitely not "accurate" if you are using a VPN, because it's gonna show what other people who are using the same vpn as you have downloaded. which is kinda cool in its place)
https://iknowwhatyoudownload.com/
(idk how accurate it is tho. it's definitely not "accurate" if you are using a VPN, because it's gonna show what other people who are using the same vpn as you have downloaded. which is kinda cool in its place)
Do It by Code
Torrent download tracker https://iknowwhatyoudownload.com/ (idk how accurate it is tho. it's definitely not "accurate" if you are using a VPN, because it's gonna show what other people who are using the same vpn as you have downloaded. which is kinda cool…
it can also show "Distribution statistics by country" for a certain torrent object
cool stuff ig
cool stuff ig
This media is not supported in your browser
VIEW IN TELEGRAM
Prompt:
Model: Google Veo 3 Fast
a raw walk POV video in the nature. there is a lake, it's raining, it's evening, there is a wet bench.
Model: Google Veo 3 Fast