PT-2026-118277

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc rx fsm function when msglen is set to 0...

PT-2026-118322

Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service...

CVE-2026-98547

A flaw was found in the Linux kernel's afpacket network socket implementation. An integer overflow occurs during timeout calculations when configuring packet receive rings with large block sizes. A local user with raw network privileges can exploit this vulnerability by setting an oversized socke...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/21336/ Author Alex Hernandez aka @alt3kx...

CVE-2026-112901

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted XBM X BitMap image file. When the application parses the image header, an inefficient regular expression causes excessive computational backtracking, stalling worker processes and...

CVE-2026-98541

A flaw was found in the Linux kernel's Foo-over-UDP FOU networking subsystem. When configuring a direct encapsulation tunnel without specifying the required network protocol attribute, the kernel permits tunnel socket creation with an uninitialized protocol value. Consequently, incoming network...

CVE-2026-98544

A flaw was found in the Linux kernel's Brocade 10Gb Ethernet bna driver. During device removal or shutdown, internal timers can rearm each other and continue executing after associated driver data structures have been released. A local user with administrative privileges could exploit this race...

CVE-2026-98543

A flaw was found in the Linux kernel. A local privileged user could cause a Denial of Service DoS or file system corruption due to improper locking in the BPF Berkeley Packet Filter subsystem. When attaching sleepable BPF programs to certain file removal hooks, the kernel verifier incorrectly...

CVE-2026-98539

A flaw was found in the Linux kernel's NTFS3 file system driver. A race condition during directory creation allows concurrent path lookup or mount operations to access and lock an inode before its initialization finishes. This improper synchronization resets and corrupts the directory's internal...

CVE-2026-98540

A flaw was found in the Linux kernel's function probe fprobe tracing component. This vulnerability can result in a Denial of Service DoS due to improper memory initialization. When tracing kernel functions, unused shadow stack space is left uncleared, causing return routines to parse leftover dat...

CVE-2026-112896

A flaw was found in Pillow. When saving or re-encoding a Tagged Image File Format TIFF image containing inconsistent color map metadata, the encoder reads beyond an allocated memory buffer. A remote attacker could exploit this vulnerability by submitting a specially crafted image, leading to a...

CVE-2018-6574

CVE-2018-6574...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

CVE-2026-112895

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...

CVE-2026-112894

A flaw was found in Pillow. When converting multi-frame images into a multi-page PDF document, the library repeatedly scans previously assigned object identifiers, resulting in quadratic processing time. A remote attacker could exploit this vulnerability by supplying a crafted image with a large...

CVE-2026-112404

A flaw was found in Pillow. When processing Tagged Image File Format TIFF images, the library fails to properly validate buffer boundaries during tile and color decoding routines. A remote attacker could exploit this vulnerability by supplying a specially crafted TIFF file with conflicting metada...

CVE-2026-112397

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image with a width of zero to an application performing morphology operations. Because Pillow fails to validate zero-width image geometry during these operations, it attempts an...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

CVE-2023-43646

CVE-2023-43646 Vulnerability Overview CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS in node.js package Part of the rebob project Vulnerability Description github advisories /\sfunction?:\s|\s/^?:/+/\s^\/+/ This vulnerability can be exploited when there is an imbalance in parentheses, which results...

CVE-2026-112894

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with saveall enabled. PdfParser.nextobjectid repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can suppl...