EUVD-2026-67086

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680

Undertow (specifically the Undertow-core component) is vulnerable to a Denial of Service (DoS) attack exploitable over the network without authentication. A remote attacker can send specially crafted WebSocket messages with the permessage-deflate extension negotiated, triggering excessive memory ...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Sicherheitsforscher: Jacob Archuleta @nullze 📝 Schwachstellenübersicht Eine kritische Denial-of-Service-Schwachstelle DoS wurde im Tesla Model 3, Model S und Model X alle Versionen vor 2020.4.10 entdeckt. Diese Schwachstelle erlaubte einem...

CVE-2026-78002

A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...

CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-69249

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

eero-zero-length-ipv6-options-header-dos

eeroOS Vulnerabilità di Denial of Service dell'interfaccia Ethernet CVE-2023-5324 Se i dispositivi eero Pro 5 ricevono un pacchetto IPv6 con lunghezza del payload pari a zero e contenente un header di estensione hop-by-hop o delle opzioni di destinazione che fa riferimento a un altro header di...

CVE-2024-42849

CVE-2024-42849 Ein Problem in Silverpeas v.6.4.2 und niedriger erlaubt es einem entfernten Angreifer, einen Denial-of-Service über die Passwortänderungsfunktion zu verursachen. Beschreibung Wenn die Passwortänderungsanforderung abgefangen und ein ausreichend langer 1 MB String als neues Passwort...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-67353

A flaw was found in guzzlehttp/guzzle. A remote attacker can exploit this vulnerability by sending an excessive number of large 'Set-Cookie' header fields from a malicious server. This causes the application's CookieJar to store an unbounded amount of data in memory, leading to resource exhaustio...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

bouncer-overflow

PgBouncer Crash PoC Questo repository contiene una proof of concept locale per un crash di PgBouncer causato da un integer overflow nelle versioni vulnerabili di PgBouncer. Il setup Docker incluso compila PgBouncer 1.25.1, avvia un backend PostgreSQL, abilita l'autenticazione SCRAM-SHA-256 ed...

CVE-2023-24998

Wenn multipartResolver nicht definiert ist oder StandardServletMultipartResolver registriert wurde Verwendet FileUpload aus dem Tomcat-internen Paket Dabei muss die Tomcat-Version größer als 9.0.71 sein Spring Boot 2.7.8 Die maxParameterCount-Einstellung Standard: 10000 von Tomcat wird in...

RegEx-DoS

👮 👊 RegEx Denial of Service ReDos Scanner Hilft Ihnen, reguläre Ausdrücke zu finden, die anfällig für Denial-of-Service-Angriffe sind. Bitte lesen Sie dieBeitragsrichtlinien, bevor Sie einen Beitrag leisten. Ein Screenshot des ReDoS-Scans in Aktion. Was ist Regular Expression Denial of Service?...

CVE-2022-23884

CVE-2022-23884 Esistono vulnerabilità a livello di rete nel server ufficiale di Minecraft: Bedrock Edition noto come Bedrock Server, che consentono a un attaccante di lanciare un attacco DoS. CVE-2022-23884 Mojang Bedrock Dedicated Server 1.16.0-1.18.12 è affetto da un loop infinito e dal crash d...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-vulnerability-POC- CVE-2025-8671-Schwachstellen-POC CVE-2025-8671-Schwachstellenscanner Ein professionelles Sicherheitsforschungstool zur Erkennung der MadeYouReset -Schwachstelle CVE-2025-8671 in HTTP/2-Servern. Dieser Scanner verwendet mehrere Erkennungsheuristiken, um Server zu...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...