Envoy-CPU-Exhaustion-Vulnerability-PoC

Preuve de concept de vulnérabilité d'épuisement CPU d'Envoy Ce dépôt contient un script Python de preuve de concept PoC pour démontrer la vulnérabilité d'épuisement CPU dans Envoy causée par un déluge de trames CONTINUATION. Auteur : blackmagic 2024 Description Envoy est un proxy de service et de...

DHEater

DHEater DHEater est l'implémentation de preuve de concept de l'attaque DHEat CVE-2002-20001. Elle sature le processeur d'un serveur en imposant l'échange de clés Diffie-Hellman éphémère DHE ou Diffie-Hellman sur courbe elliptique éphémère ECDHE via TLS et SSH. Pour plus d'informations sur...

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 Le fichier load-scripts.php, dont le but est de récupérer plusieurs packages JavaScript via une seule requête. $ chmod +x Execute.sh $ ./Execute.sh Comment ça marche ! Le problème réside dans le fichier load-scripts.php, dont le but est de récupérer plusieurs...

openssh_dos

Puisque les serveurs OpenSSH ne limitent pas la longueur du mot de passe de connexion, vous pouvez faire planter ces serveurs en envoyant des mots de passe très longs qui utilisent d'énormes quantités de CPU du serveur pour le hachage. Cette vulnérabilité est connue sous le nom de CVE-2016-6515...

phpstress

phpstress Preuve de concept de Night Lion Security : déni de service / testeur de stress pour les sites PHP fonctionnant avec des systèmes Apache et NGINX PHP-FPM et PHP-CGI En utilisant une connexion câble/DSL standard, cette attaque peut saturer le processeur et la RAM d’un serveur web Linux à...

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

CVE-2026-107833 OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessResponse in internal/bodyprocessors/json.go passes the ignoreJSONRecursionLimit value of -1 to readJSON, while the recursive guard only stops at zero. A network attacker who can...

CVE-2026-107833

The OWASP Coraza WAF library (versions 3.0.0 through 3.8.0 ) contains an unbounded recursion vulnerability in the ProcessResponse function located in internal/bodyprocessors/json.go. The root cause is that the ignoreJSONRecursionLimit value of -1 is passed to readJSON, while the recursive guard o...

CVE-2026-107833 OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessResponse in internal/bodyprocessors/json.go passes the ignoreJSONRecursionLimit value of -1 to readJSON, while the recursive guard only stops at zero. A network attacker who can...

golang-CVE-2023-44487

Test de Golang CVE-2023-44487 Ce dépôt contient des ressources de test et des résultats pour le CVE-2023-44487. Il utilise une version modifiée de https://github.com/secengjeff/rapidresetclient pour tester différentes configurations de serveur Golang. Test contre un serveur normal go run server.g...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 À propos Ce projet exécute un simple point de terminaison de téléchargement de fichiers avec Tomcat 10.1.41 et un Jakarta Servlet. L'exploit exécute, par défaut, 1000 requêtes multipart parallélisées avec 1000 parties et 50 en-têtes par partie, à partir de 50...

Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. JavaScript is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fix...

CVE-2026-86463 Apache CXF: FIQL Query Parser Denial of Service

Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounters a long string without an operator, causing the parser to consume excessive CPU time. An attacker can send a crafte...

EUVD-2026-95698

Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounters a long string without an operator, causing the parser to consume excessive CPU time. An attacker can send a crafte...

CVE-2026-86463

The Apache CXF FIQL query parser is vulnerable to a Denial of Service condition due to an issue in how it searches for operators within query expressions. When the parser encounters a long string without an operator, it may attempt numerous combinations, leading to excessive CPU consumption . An ...

Denial Of Service (DoS)

com.rabbitmq:amqp-client is vulnerable to Denial-of-service DoS. The vulnerability is due to the JSONReader.read method failing to terminate when parsing truncated strings or unterminated line comments, which allows an attacker to exhaust heap memory or consume excessive CPU resources through...

DEBIAN-CVE-2026-78667

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

CVE-2026-78667

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

CVE-2026-78667

The FileServer(FS) , ServeContent , and ServeFile(FS) components are vulnerable to a CPU exhaustion issue. This occurs when parsing a Range header that contains a large number of small ranges, leading to excessive resource consumption. This vulnerability is associated with CWE-770 (Allocation of ...

CVE-2026-78667 Lack of limit on size of parsed Range headers in net/http

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...