com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing

A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...

CVE-2026-85642

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642

The Formidable Forms WordPress plugin (versions before 7.0 ) is vulnerable to a Denial of Service (DoS) attack because it fails to verify the identity of the caller before recording timestamps for rate limiting payment gateway verification requests . An unauthenticated attacker can exploit this f...

EUVD-2026-107084

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

WordPress Formidable Forms plugin < 7.0 - Unauthenticated Payment Gateway Connect Verification DoS vulnerability

Unauthenticated Payment Gateway Connect Verification DoS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Formidable Forms versions 7.0...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Author Mohammed Idrees Banyamer 📍 Country: Jordan 📸 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2026-26235 - Unauthenticated Denial of Service via missing authentication in JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Vulnerability Description CVE-2026-26235 is an unauthenticated...

dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS Crash only This is a copy of the initial repository published by @marcinguy who then took it down and made private...

CVE-2026-98737

A flaw was found in the Linux kernel's Bluetooth subsystem. This flaw allows a local user to cause a Denial of Service DoS or potentially escalate privileges due to a use-after-free condition. The issue arises from a race condition where synchronous command routines access inquiry cache entries...

CVE-2026-98708

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or system instability. During in-place channel context replacement, an old channel context can be freed prematurely while still referenced by its replacement...

CVE-2026-98696

A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...

CVE-2022-24999

CVE-2022-24999 This repository contain exploits samples of the vulnerability we found in the JS library "qs" in december 2021. This vulnerability was fixed in express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4. qs Array & String Bombs Vulnerable versio...

AirDroidPwner

AirDroidPwner CVE-2019-9599 This exploit is no longer functional Proof of Concept Video: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 What is AirDroid? AirDroid is one of the best known and mos...

CVE-2026-98861

A flaw was found in the Linux kernel's function probe fprobe tracing mechanism. When handlers execute during inactive Read-Copy Update RCU, a kernel synchronization mechanism states, unregistration routines fail to wait for active handlers to complete before freeing memory. A privileged local...

CVE-2026-98859

A flaw was found in the Linux kernel's Human Interface Device HID multitouch driver. When a multitouch device is disconnected or removed, the driver fails to prevent the release timer from being rescheduled by incoming input reports. Once the driver deallocates the device data, the timer callback...

CVE-2026-98840

A flaw was found in the Linux kernel's virtual console screen driver. A race condition between virtual console write operations and console deallocation can cause the kernel to access previously freed memory, resulting in a use-after-free vulnerability. A local user could exploit this flaw to cau...

CVE-2026-98762

A flaw was found in the Linux kernel's USB DWC2 driver. A race condition during host controller teardown or initialization failure allows the wakeup timer to execute after host resources have been released. A local user could exploit this use-after-free vulnerability to cause a Denial of Service...

CVE-2026-98800

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program attached to a trampoline is detached, the kernel may release the program's memory prematurely before preempted tasks have safely completed execution. A local user can exploit this race condition to...