CVE-2026-38361

CVE-2026-38361: Multiple Unauthenticated DoS Vulnerabilities in dash-uploader Multiple unauthenticated Denial of Service DoS issues in fohrloop/dash-uploader Python, PyPI, including but not limited to Out-of-Memory OOM process crash, file truncation to zero bytes, permanent disk exhaustion, and...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info Sources: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing

A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...

CVE-2026-85642

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642

The Formidable Forms WordPress plugin (versions before 7.0 ) is vulnerable to a Denial of Service (DoS) attack because it fails to verify the identity of the caller before recording timestamps for rate limiting payment gateway verification requests . An unauthenticated attacker can exploit this f...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

EUVD-2026-107084

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

WordPress Formidable Forms plugin < 7.0 - Unauthenticated Payment Gateway Connect Verification DoS vulnerability

Unauthenticated Payment Gateway Connect Verification DoS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Formidable Forms versions 7.0...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Author Mohammed Idrees Banyamer 📍 Country: Jordan 📸 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2026-26235 - Unauthenticated Denial of Service via missing authentication in JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Vulnerability Description CVE-2026-26235 is an unauthenticated...

dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS Crash only This is a copy of the initial repository published by @marcinguy who then took it down and made private...

CVE-2026-98737

A flaw was found in the Linux kernel's Bluetooth subsystem. This flaw allows a local user to cause a Denial of Service DoS or potentially escalate privileges due to a use-after-free condition. The issue arises from a race condition where synchronous command routines access inquiry cache entries...

CVE-2026-98708

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or system instability. During in-place channel context replacement, an old channel context can be freed prematurely while still referenced by its replacement...

CVE-2026-98696

A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...

CVE-2022-24999

CVE-2022-24999 This repository contain exploits samples of the vulnerability we found in the JS library "qs" in december 2021. This vulnerability was fixed in express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4. qs Array & String Bombs Vulnerable versio...

AirDroidPwner

AirDroidPwner CVE-2019-9599 This exploit is no longer functional Proof of Concept Video: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 What is AirDroid? AirDroid is one of the best known and mos...

CVE-2026-98861

A flaw was found in the Linux kernel's function probe fprobe tracing mechanism. When handlers execute during inactive Read-Copy Update RCU, a kernel synchronization mechanism states, unregistration routines fail to wait for active handlers to complete before freeing memory. A privileged local...

CVE-2026-98859

A flaw was found in the Linux kernel's Human Interface Device HID multitouch driver. When a multitouch device is disconnected or removed, the driver fails to prevent the release timer from being rescheduled by incoming input reports. Once the driver deallocates the device data, the timer callback...