PT-2026-90782

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...

CVE-2026-90554

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nanonemotronvl.py, extractaudiofromvideos calls loadaudiopyavBytesIOvideobytes without the maxdurations or maxdecodebytes parameters, so neith...

dir-3040_dos

Отказ в обслуживании dir-3040 Dir-3060 также может быть затронут, так как они используют много общих компонентов из той же прошивки. Протестировано на последней прошивке 1.20b03a hotfix Страница доступа пользователя ftp-сервера по умолчанию настроена так, что любой пользователь с правами записи...

EUVD-2026-76872

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nanonemotronvl.py, extractaudiofromvideos calls loadaudiopyavBytesIOvideobytes without the maxdurations or maxdecodebytes parameters, so neith...

CVE-2026-90554

vLLM versions >=0.10.2 and

CVE-2026-90554 vLLM before 0.28.0 Denial of Service via audio extraction

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nanonemotronvl.py, extractaudiofromvideos calls loadaudiopyavBytesIOvideobytes without the maxdurations or maxdecodebytes parameters, so neith...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Apache Tomcat HTTP/2 DoS 脆弱性 CVE-2025-31650 の概念実証 PoC このスクリプトは、HTTP/2 経由で不正な priority ヘッダーを送信し、Apache Tomcat にメモリ枯渇状態を引き起こします。 🎯 影響を受けるバージョン Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39 Apache Tomcat 11.0.0-M2 – 11.0.5 ⚙️ 特徴 ✔️ HTTP/2 サポートの検証 ✔️...

CVE-2022-20494

CVE-2022-20494 APK をダウンロード このアプリは、私が発見した Android の NotificationManagerService における高深刻度の恒久的サービス拒否（denial-of-service）脆弱性を実証します。エクスプロイトを実行すると、デバイスは黒い画面を表示するか、クラッシュと再起動を繰り返し続けます。 このアプリは、addAutomaticZenRule API を利用して、大量のメモリを占有する悪意のある zen...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 스트림 증폭 PoC · Docker · 웹 콘솔 취약점 HTTP/2는 단일 TCP 연결을 통해 여러 스트림을 멀티플렉싱할 수 있습니다. 이 PoC는 다수의 내부 참조를 포함하는 특수하게 구성된 HEADERS 프레임을 생성하여, 서버가 이를 추적하기 위해 막대한 양의 메모리를 할당하도록 강제합니다...

Wallbreak

Wallbreak Скачать APK Это приложение демонстрирует две уязвимости высокой степени серьезности, приводящие к постоянному отказу в обслуживании в сервисе WallpaperManagerService Android, которые я обнаружил: CVE-2021-39670 и CVE-2021-39690. После запуска любой из этих эксплуатаций устройство будет...

PT-2026-90660

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

PT-2026-90659

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano nemotron vl.py, extract audio from videos calls load audio pyavBytesIOvideo bytes without the max duration s or max decode bytes...

CVE-2026-89735

A flaw was found in the Linux kernel's USB gadget MIDI2 driver. The driver fails to properly remove default configuration file system configfs groups during teardown, leading to a resource leak. A local attacker could exploit this vulnerability to cause memory exhaustion, potentially resulting in...

CVE-2026-50018

Hoverfly (open source API simulation tool) prior to version 1.12.8 is vulnerable to denial of service via a goroutine leak in its remote post-serve actions . The root cause is the use of http.DefaultClient without any timeout configuration: when the remote endpoint is unreachable or intentionally...

CVE-2026-54166

Shelf , a physical asset tracking platform, contains a Server-Side Request Forgery (SSRF) in its Asset CSV Content Import feature prior to version 1.20.3 . Authenticated users with the asset:import permission can bypass imageUrl validation using image-extension suffixes, path keywords, domain sub...

CVE-2026-89648

A flaw was found in the Linux kernel's Ceph client. A malicious or compromised Ceph Metadata Server MDS could send a specially crafted reply with an unbounded number of delegated inode intervals. This could cause the client to enter an infinite loop or exhaust memory resources, leading to a denia...

CVE-2026-89644

A flaw was found in the Linux kernel's btrfs filesystem. When performing direct I/O writes in a NOCOW No Copy-On-Write range, an extent map reference may not be properly released if an error occurs during extent creation. This oversight can lead to an extent map leak, potentially causing memory...

CVE-2026-89533

A flaw was found in the svcrdma component of the Linux kernel. Incorrect offset arithmetic in the svcrdmareadchunkrange function can lead to a u32 underflow. This underflow can cause the system to attempt to allocate a large amount of memory, potentially resulting in a Denial of Service DoS due t...

CVE-2026-89699

This vulnerability affects the Linux kernel 's NFS server daemon (nfsd ), specifically the nfsd4_decode_create() function handling NFSv4 CREATE operations with NF4LNK symlink targets. The root cause is an unbounded cr_datalen accepted from the wire, allowing a client to force a kmalloc of several...

CVE-2026-54135

AirSane is a SANE frontend and scanner server supporting Apple's AirScan protocol. Versions prior to 0.4.12 are vulnerable to a remote, unauthenticated Denial of Service (OOM) in its custom HTTP server. The root cause lies in the HttpServer::Request::content function in httpserver.cpp, which read...