CVE-2025-43960

CVE-2025-43960 - Injeção de Objetos PHP no Adminer 4.8.1 via Monolog - Negação de Serviço DoS Após meses de espera por uma resposta da MITRE, obtive o CVE-2025-43960 com um ataque de Injeção de Objetos PHP contra o serviço Adminer 4.8.1, causando Negação de Serviço DoS através de Manipulação de...

CVE-2017-7472

CVE-2017-7472 KEYS उपप्रणाली Linux कर्नेल 4.10.13 से पहले स्थानीय उपयोगकर्ताओं को KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring कॉल की एक श्रृंखला के माध्यम से सेवा से वंचित मेमोरी खपत करने की अनुमति देती है। शॉर्टकट असुरक्षित kernel 4.10.13...

GO-RPCBOMB

설명: CVE-2017-8779 rpcbind 0.2.4까지, LIBTIRPC 1.0.1까지 및 1.0.2-rc부터 1.0.2-rc3까지, 그리고 NTIRPC 1.4.3까지는 XDR 문자열에 대한 메모리 할당 시 최대 RPC 데이터 크기를 고려하지 않으며, 이는 원격 공격자가 조작된 UDP 패킷을 포트 111에 전송하여 서비스 거부후속 해제 없이 메모리 소비를 유발할 수 있게 합니다. 이 취약점은 rpcbomb으로 알려져 있습니다. CVE 링크 https://vulners.com/cve/CVE-2017-8779 설치 절차 가정...

CVE-2007-5962

CVE-2007-5962 1. परिचय मेरा उपकरण Python में लिखा गया है और CVE-2007-5962 भेद्यता का शोषण करके निर्देशिका परिवर्तनों की एक श्रृंखला करता है जो ftp डेमॉन को क्रैश कर देता है। root@kitploit: चेतावनी!!! कृपया ध्यान दें कि बिना अनुमति के हैकिंग उपकरणों का उपयोग अवैध है और कानूनी समस्याएँ हो सकती हैं।...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

devalue: devalue: Excessive memory consumption via deserialization of sparse arrays

A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the devalue.parse function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resultin...

CVE-2026-18929

Carbone's yazl-based zip decompression of .docx files lacks entry-size validation, enabling zip-bomb attacks that cause excessive memory consumption and server crashes. CVSS 6.9 (MEDIUM). Fixed in versions 3.8.2, 4.26.3, and 5.4.4. No in-the-wild exploitation reported. Details: https://github.com...

SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

Exploit for CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + Environment...

CVE-2026-48804

A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

DEBIAN-CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

UBUNTU-CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

UBUNTU-CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...

CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-71870 pypdf: Possible large memory usage for large /ToUnicode streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

Use of Blocking Code in Single-threaded, Non-blocking Context

Overview org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Use of Blocking Code in Single-threaded, Non-blocking Context via the ticks parameter in radar diagrams. An attack...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...