CVE-2026-85476 Apache Thrift: c_glib `read_all` spins when the underlying read returns 0

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85476 Apache Thrift: c_glib `read_all` spins when the underlying read returns 0

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85476

Versions of Apache Thrift prior to 0.25.0 are vulnerable to a Loop with unreachable exit condition ('infinite loop') within the c_glib bindings . Specifically, the read_all function spins indefinitely when the underlying read operation returns 0. This vulnerability can lead to high availability i...

CVE-2026-94654

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94654

The Apache Thrift python bindings are vulnerable to a Loop with unreachable exit condition (infinite loop) vulnerability (CWE-835). Specifically, the Python TNonblockingServer busy-loops and stops selecting all file descriptors after encountering an 8192-byte-boundary frame . This issue affects v...

CVE-2026-94654 Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94654 Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91568

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91398

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86537

A vulnerability exists in the Apache Thrift D language bindings (versions before 0.25.0 ) where a remote, unauthenticated attacker can cause a Denial of Service (DoS) . By sending specially crafted input—specifically a truncated HTTP request —the attacker can trigger an integer underflow or an un...

CVE-2026-86537 Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91452

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-86535

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-86535

A flaw in Apache Thrift (versions before 0.25.0 ) allows a remote attacker to exploit the NodeJS bindings when using TJSONProtocol . By submitting specially crafted messages, an attacker can trigger an infinite loop or cause prototype pollution (unintended modification of shared object attributes...

cve-2021-45046

log4j RCE CVE-2021-44228は2.15でパッチされたが、CVE-2021-45046 DoSを引き起こす 脆弱性が新たに発見された。 以下はテストした結果。 テスト環境 log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 構文テスト - Not Vuln 2. 任意のctxオブジェクト名を挿入 - Not vuln 3. contextを受け取るオブジェクトと同じ名前で挿入する場合 - infinite loop...

PT-2026-104292

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The D language bindings contain an integer underflow wrap or wraparound issue, which can lead to an uncaught exception and a loop with an unreachable exit condition, resulting in an infinite...

PT-2026-104308

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An infinite loop occurs in the Apache Thrift python bindings due to an unreachable exit condition. Recommendations Upgrade to version 0.25.0...

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 概念验证 概述 这是 libX11 拒绝服务漏洞 CVE-2023-43786 的 DoS 概念验证。 它将触发整数溢出并导致无限循环。 受影响的版本为：libX11 1.8.6 及以下版本，以及 libXpm 3.5.16。 如需全面了解，请参阅随附的博客文章以获取详细信息。 依赖项 存在漏洞的 libXpm 和 libX11 版本 已安装 xpmutils 使用方法 1. 确保已安装 xpmutils： sudo apt-get install xpmutils 2. 运行 PoC： sxpm cve-2023-43786.xpm...

CVE-2026-24688

CVE-2026-24688 - pypdf - 循环引用拒绝服务漏洞 本仓库包含用于触发 CVE-2026-24688 的概念验证代码。 摘要 pypdf 的大纲（书签）解析逻辑中存在严重的拒绝服务漏洞。当处理包含循环大纲引用的 PDF 时，解析器会进入无限循环，持续分配内存，在我的机器（TM）上每秒消耗数百 MB 内存，并导致整个系统崩溃。 这是系统级 DoS，而不仅仅是应用程序挂起。 内容 maliciouscircularoutline.pdf - 带有循环大纲的利用 PDF（754 字节） createmaliciouspdf.py - 用于生成利用 PDF 的脚本...