CVE-2017-7472

CVE-2017-7472 Linux内核4.10.13之前版本的KEYS子系统允许本地用户通过一系列KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring调用导致拒绝服务（内存消耗）。 快捷方式 受影响 内核 4.10.13...

CVE-2025-43960

CVE-2025-43960 - Adminer Adminer のクラッシュが他のサービス/テナント 例: コンテナや共有プロセス にも影響を与える場合、スコープ: 変更 が適用される可能性があります: ベクター: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H スコア: 8.6 High 追加情報 潜在的な緩和策 Adminer および Monolog 内で信頼できないデータに対して unserialize を使用しない。 PHP でメモリ制限 memorylimit を適用し、過剰なリソース消費を防ぐ。 unserialize で allowedclasse...

CVE-2026-45769

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol UDP traffic to the IKEv2 parser. This can cause the...

GO-RPCBOMB

説明: CVE-2017-8779 rpcbind 0.2.4 以前、LIBTIRPC 1.0.1 以前および 1.0.2-rc から 1.0.2-rc3 まで、NTIRPC 1.4.3 以前は、XDR 文字列のメモリ割り当て時に最大 RPC データサイズを考慮しません。このため、リモートの攻撃者が細工した UDP パケットをポート 111 に送信することで、サービス拒否（その後の解放を伴わないメモリ消費）を引き起こす可能性があります。別名 rpcbomb と呼ばれます。 CVE リンク https://vulners.com/cve/CVE-2017-8779 インストール手順 前提条...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2007-5962

CVE-2007-5962 1. はじめに 私のツールはPythonで書かれており、CVE-2007-5962の脆弱性を悪用して、一連のディレクトリ変更を行い、FTPデーモンをクラッシュさせます。 root@kitploit: 免責事項!!! 注意: 無許可でのハッキングツールの使用は違法であり、法的問題を引き起こす可能性があります。したがって、このツールは許可を得たシステム上でのテスト目的のみに使用することが重要です。 2. この脆弱性を悪用するための条件 ファイアウォールが無効または侵害されている 攻撃者はFTPアカウントのユーザー名とパスワードを知っている必要がある...

CVE-2026-13287

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13285

IBM MQ Managed File Transfer is vulnerable to XML external entity injection (XXE) in its template parser (CWE-611). A remote attacker with low privileges can exploit this over the network to expose sensitive information or consume memory resources, rated CVSS 7.1 HIGH (C:H, I:N, A:L). Affected ve...

CVE-2026-13285 IBM MQ Managed File Transfer is vulnerable to XML external entity injection

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-90668

A flaw was found in UnrealIRCd. The webserver component does not properly limit the number of HTTP request headers. A remote attacker can exploit this vulnerability by sending an HTTP request with an excessive number of headers, leading to memory consumption and an unresponsive server. This can...

tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption

A flaw was found in Tornado, a Python web framework and asynchronous networking library. Its gzip decompression routines process data in limited-size chunks but do not enforce an overall limit on the total accumulated decompressed data. This vulnerability allows a malicious server to consume...

tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption

A flaw was found in Tornado, a Python web framework and asynchronous networking library. Its gzip decompression routines process data in limited-size chunks but do not enforce an overall limit on the total accumulated decompressed data. This vulnerability allows a malicious server to consume...

CVE-2026-90668

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...

CVE-2026-90668

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...

CVE-2026-90668

UnrealIRCd versions 6.0.5 through 6.2.6 contain a denial-of-service vulnerability in its webserver component. The server does not limit the number of HTTP request headers, allowing a remote unauthenticated attacker to send a single HTTP request with an unlimited number of headers, causing excessi...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

CVE-2026-2310

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-2310

IBM webMethods Integration Server 11.1 is vulnerable to an XML External Entity Injection (XXE) flaw when processing XML data, as described by CWE-91 (XML Injection). A remote attacker with low privileges and a local attack vector can exploit this to expose sensitive information or consume memory ...

CVE-2026-45765 Suricata dnp3: unbounded reassembly can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory,...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...