CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS Dieses Tool führt eine hochvolumige, asynchrone HTTP/2-Anfrageflut durch, die fehlerhafte priority-Header verwendet, um die Stabilität von Apache Tomcat-Servern der Versionen 10.1.10 bis 10.1.39 zu testen. ⚠️ Dies ist ausschließlich für Bildungs- und...

Impulse

💣 Impulse Toolkit moderno per Denial-of-service 💻 Finestra principale 📡 Metodi:...

CVE-2026-5680

Undertow (specifically the Undertow-core component) is vulnerable to a Denial of Service (DoS) attack exploitable over the network without authentication. A remote attacker can send specially crafted WebSocket messages with the permessage-deflate extension negotiated, triggering excessive memory ...

EUVD-2026-67086

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Sicherheitsforscher: Jacob Archuleta @nullze 📝 Schwachstellenübersicht Eine kritische Denial-of-Service-Schwachstelle DoS wurde im Tesla Model 3, Model S und Model X alle Versionen vor 2020.4.10 entdeckt. Diese Schwachstelle erlaubte einem...

-CVE-2021-44790

CVE-2021-44790 وصف CVE-2021-44790 يصف CVE-2021-44790 ثغرة أمنية على مستوى النظام تقع في وحدة modlua لخادم Apache HTTP، وتحديدًا في الإصدار 2.4.51 والإصدارات السابقة له. يتم تفعيل هذه الثغرة عندما تتعامل الدالة r:parsebody مع طلبات HTTP multipart/form-data بشكل غير صحيح، وغالبًا ما يكون السبب هو...

CVE-2026-78002

A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-69249

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

eero-zero-length-ipv6-options-header-dos

eeroOS Vulnerabilità di Denial of Service dell'interfaccia Ethernet CVE-2023-5324 Se i dispositivi eero Pro 5 ricevono un pacchetto IPv6 con lunghezza del payload pari a zero e contenente un header di estensione hop-by-hop o delle opzioni di destinazione che fa riferimento a un altro header di...

CVE-2024-42849

CVE-2024-42849 Ein Problem in Silverpeas v.6.4.2 und niedriger erlaubt es einem entfernten Angreifer, einen Denial-of-Service über die Passwortänderungsfunktion zu verursachen. Beschreibung Wenn die Passwortänderungsanforderung abgefangen und ein ausreichend langer 1 MB String als neues Passwort...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-67353

A flaw was found in guzzlehttp/guzzle. A remote attacker can exploit this vulnerability by sending an excessive number of large 'Set-Cookie' header fields from a malicious server. This causes the application's CookieJar to store an unbounded amount of data in memory, leading to resource exhaustio...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

bouncer-overflow

PgBouncer Crash PoC Questo repository contiene una proof of concept locale per un crash di PgBouncer causato da un integer overflow nelle versioni vulnerabili di PgBouncer. Il setup Docker incluso compila PgBouncer 1.25.1, avvia un backend PostgreSQL, abilita l'autenticazione SCRAM-SHA-256 ed...

CVE-2023-24998

Wenn multipartResolver nicht definiert ist oder StandardServletMultipartResolver registriert wurde Verwendet FileUpload aus dem Tomcat-internen Paket Dabei muss die Tomcat-Version größer als 9.0.71 sein Spring Boot 2.7.8 Die maxParameterCount-Einstellung Standard: 10000 von Tomcat wird in...

RegEx-DoS

👮 👊 RegEx Denial of Service ReDos Scanner Hilft Ihnen, reguläre Ausdrücke zu finden, die anfällig für Denial-of-Service-Angriffe sind. Bitte lesen Sie dieBeitragsrichtlinien, bevor Sie einen Beitrag leisten. Ein Screenshot des ReDoS-Scans in Aktion. Was ist Regular Expression Denial of Service?...