551162 matches found
EUVD-2026-67662
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are...
CVE-2026-33607
CVE-2026-33607 affects Open-Xchange Dovecot , where an authenticated attacker can abuse the IMAP LIST command to consume excessive CPU, causing degradation or denial of service for IMAP. The vulnerability requires low privileges (valid credentials) and is network-reachable with low complexity, ra...
CVE-2026-33607
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are...
CVE-2026-33605
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
EUVD-2026-67660
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
CVE-2026-33605
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
CVE-2026-33605
CVE-2026-33605 affects the Open-Xchange (OX) ManageSieve service. An unauthenticated attacker can crash the managesieve-login process by sending a small malformed command before authenticating. The blast radius depends on the operating mode: in high-security mode (default for community releases),...
CVE-2026-33263
When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...
EUVD-2026-67658
When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...
CVE-2026-27852
CVE-2026-27852 affects Dovecot (Open-Xchange), the IMAP mail server. An attacker who can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters , causing excessive memory consumption when the message is later parsed. Although the me...
EUVD-2026-67657
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...
CVE-2026-27852
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...
CVE-2026-27852
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...
CVE-2023-50257
Riproduzione di ROS2 CVE-2023-50257 🔍 Panoramica Questo repository si basa su un PoC per CVE-2023-50257 e automatizza la raccolta di pacchetti RTPS, analizza i valori GUID e invia un pacchetto DoS con successo. CVE-2023-50257 è una vulnerabilità di sicurezza nota in ROS2 Robot Operating System 2...
wordpress-cve-2018-6389
WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service = 4.9.4 Datum: 05/02/2018 Software-Link: WordPress Version: = 4.9.4 Getestet auf: KaLi Linux 2018.1 CVE: CVE-2018-6389 Entdeckt von: Barak Tawily Exploit von: Javier Olmedo VERWENDUNG Klone dieses Repository...
CobaltStrikeDos
Eine Denial-of-Service-Sicherheitslücke DoS CVE-2021-36798 wurde in Cobalt Strike gefunden. Die Sicherheitslücke wurde im Rahmen des 4.4 Releases behoben. Weitere Informationen finden Sie here Verwendung root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3...
CVE-2024-24549
Apache Tomcat DoS Exploit CVE-2024-24549 Descrizione Questo repository contiene un exploit di prova di concetto PoC per un attacco di denial of service DoS contro Apache Tomcat versione 9.0.83 , basato su un problema identificato nella gestione delle intestazioni HTTP e dei payload. Questo script...
CVE-2023-46442_POC
CVE-2023-46442POC Ambiente: Java 8 PoC para CVE-2023-46442, vulnerabilidade de Negação de Serviço encontrada no Soot anterior à versão 4.4.1 sob Java 8 Ao recuperar o corpo de um método maliciosamente criado, um arquivo de classe ou método de tamanho muito pequeno pode causar enorme consumo de...
CVE-2022-24611
CVE-2022-24611 Detalhes sobre o ataque Z-Wave S0-No-More. Para uma análise completa e um relatório de como isso funciona e como reproduzir os resultados, consulte o arquivo PDF anexo. Descrição resumida: Ataque de negação de serviço contra dispositivos S0 e S2 testado com a linha de produtos Z-Wa...