Monkey

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of ser…CVE-2013-3843Monkey-Project · 20% likely

   CWE-119

2. The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character…CVE-2013-3724Monkey-Project · 14% likely

   CWE-20

3. A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a cra…CVE-2025-63655Monkey-Project · CVSS 7.5 · 8.6% likely

   CWE-476

4. Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.CVE-2002-2154Monkey-Project · 7.6% likely

   CWE-22

5. The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded for…CVE-2013-2182Monkey-Project · 5.6% likely

   CWE-264

6. Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.CVE-2003-0218Monkey-Project · 5.2% likely

   CWE-119

7. The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing…CVE-2002-1663Monkey-Project · 4.0% likely

   CWE-20

8. The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of…CVE-2004-0276Monkey-Project · 3.7% likely

   CWE-20

9. Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.CVE-2002-1852Monkey-Project · 3.4% likely

   CWE-79

10. The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.CVE-2013-1771monkey · 3.0% likely

    CWE-532

11. Monkey HTTP Daemon: broken user name authenticationCVE-2013-2159monkey · 2.8% likely

    CWE-287

12. Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP…CVE-2005-1122Monkey-Project · 2.7% likely

    CWE-134

13. Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file n…CVE-2013-2181Monkey-Project · 2.7% likely

    CWE-79

14. Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header.CVE-2013-2163Monkey-Project · 2.5% likely

    CWE-20

15. Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote attackers to cause a denial of service (file desc…CVE-2014-5336Monkey-Project · 2.5% likely

    CWE-20

16. The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.CVE-2003-1209Monkey-Project · 2.4% likely

    CWE-20

17. Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file.CVE-2005-1123Monkey-Project · 1.6% likely

    CWE-119

18. A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP…CVE-2025-63658Monkey-Project · CVSS 7.5 · 1.3% likely

    CWE-121

19. An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted…CVE-2025-63657Monkey-Project · CVSS 7.5 · 1.2% likely

    CWE-125

20. An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HT…CVE-2025-63656Monkey-Project · CVSS 7.5 · 1.2% likely

    CWE-125

21. An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted…CVE-2025-63653Monkey-Project · CVSS 7.5 · 1.2% likely

    CWE-125

22. A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP…CVE-2025-63652Monkey-Project · CVSS 7.5 · 1.2% likely

    CWE-416

23. An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTT…CVE-2025-63650Monkey-Project · CVSS 7.5 · 1.2% likely

    CWE-125

24. A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTT…CVE-2025-63651Monkey-Project · CVSS 7.5 · 1.1% likely

    CWE-416

25. An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (Do…CVE-2025-63649Monkey-Project · CVSS 7.5 · 1.0% likely

    CWE-125

26. Monkey HTTP Daemon has local security bypassCVE-2013-2183monkey · 0.4% likely

    CWE-668

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.