CVE-2026-98611

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfcryptoctxcreate function attempts to read reserved fields from a parameter structure prior to verifying that the supplied buffer is sufficiently large. A local user capable of loading BPF programs can exploit this...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

CVE-2026-38361

CVE-2026-38361: Multiple Unauthenticated DoS Vulnerabilities in dash-uploader Multiple unauthenticated Denial of Service DoS issues in fohrloop/dash-uploader Python, PyPI, including but not limited to Out-of-Memory OOM process crash, file truncation to zero bytes, permanent disk exhaustion, and...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info Sources: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing

A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...

CVE-2026-85642

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

EUVD-2026-107084

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642

The Formidable Forms WordPress plugin (versions before 7.0 ) is vulnerable to a Denial of Service (DoS) attack because it fails to verify the identity of the caller before recording timestamps for rate limiting payment gateway verification requests . An unauthenticated attacker can exploit this f...

WordPress Formidable Forms plugin < 7.0 - Unauthenticated Payment Gateway Connect Verification DoS vulnerability

Unauthenticated Payment Gateway Connect Verification DoS vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Formidable Forms versions 7.0...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Author Mohammed Idrees Banyamer 📍 Country: Jordan 📸 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2026-26235 - Unauthenticated Denial of Service via missing authentication in JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Vulnerability Description CVE-2026-26235 is an unauthenticated...

dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

Duplicate Advisory: vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gx7p-2j49-hfq4. This link is maintained to preserve external references. Original Description vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients ...

Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p92p-rxj5-7p2x. This link is maintained to preserve external references. Original Description vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cac...

Uncaught Exception

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Uncaught Exception via verifyargs in vllm/samplingparams.py, which skips the mintokens = maxtokens validation when maxtokens is null on...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via MossAudioProcessingInfo.gethfprocessor in MOSS-Audio model serving, which caches a...

Insufficient Verification of Data Authenticity

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via a forged client-supplied uuid field in multimodal content parts, which vLLM uses verbatim as the...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unvalidated per-request mmprocessorkwargs forwarded through the multimodal processing...