6455 matches found
CVE-2025-43960
CVE-2025-43960 - Adminer 如果崩溃 Adminer 同时影响其他服务/租户（例如容器或共享进程），则可能应用 范围：已变更 ： 向量： AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 分数： 8.6（高） 附加信息 潜在的缓解措施 避免在 Adminer 和 Monolog 中对未受信任的数据使用 unserialize。 在 PHP 中强制设置内存限制（memorylimit）以防止资源过度消耗。 在 unserialize 中使用 allowedclasses 限制未经授权类的反序列化。 产品供应商 Adminer 受影响的产品代码库...
CVE-2007-5962
CVE-2007-5962 1. 介绍 我的工具使用 Python 编写，利用 CVE-2007-5962 漏洞执行一系列目录更改，导致 FTP 守护进程崩溃。 免责声明!!! 请注意，未经授权使用黑客工具是违法的，并且 可能导致法律问题。因此，务必仅出于测试目的 在您有权操作的系统上使用此工具。 2. 利用此漏洞的条件 防火墙已禁用或受损 攻击者必须知道 FTP 账户的用户名和密码 FTP 密码以未加密方式传输，可能被嗅探 3. 使用帮助 4. 灵感来源： vsftpd 2.0.5 - 'CWD' Authenticated Remote Memory Consumption...
CVE-2017-7472
CVE-2017-7472 Linux内核4.10.13之前版本的KEYS子系统允许本地用户通过一系列KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring调用导致拒绝服务（内存消耗）。 快捷方式 受影响 内核 4.10.13...
GO-RPCBOMB
描述：CVE-2017-8779 rpcbind 至 0.2.4、LIBTIRPC 至 1.0.1 及 1.0.2-rc 至 1.0.2-rc3、NTIRPC 至 1.4.3 在分配 XDR 字符串内存时未考虑最大 RPC 数据大小，攻击者可通过向 111 端口发送精心构造的 UDP 数据包（也就是 rpcbomb）造成拒绝服务（内存消耗且随后不释放）。 CVE 链接 https://vulners.com/cve/CVE-2017-8779 安装步骤 假设 用户熟悉 go 编程语言 用户已配置好 golang 开发环境（编译所需） 安装 编译 git clone...
CVE-2026-95512
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...
CVE-2026-95512
A flaw exists in the FreeType library, specifically within its CID font loader . A remote attacker could exploit this by tricking a user into opening content containing a specially crafted CID-keyed font . This font can trigger repeated allocations and decryptions of subroutine data across multip...
CLEANSTART-2026-OZ83684 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Security vulnerability affects the consul package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
Linux Distros Unpatched Vulnerability : CVE-2026-95512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening conten...
CVE-2026-95512
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...
pypdf: Possible large memory usage when retrieving alphabetical page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. PatchesThis has been fixed in pypdf==6.18.1. WorkaroundsIf you cannot upgrad...
pypdf: Possible large memory usage when retrieving Roman page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. PatchesThis has been fixed in pypdf==6.17.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes...
pypdf: Possible large memory usage when retrieving alphabetical page labels
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the...
EUVD-2026-90283
pypdf: Possible large memory usage when retrieving alphabetical page labels...
pypdf: Possible large memory usage when parsing font data
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...
EUVD-2026-90368
pypdf: Possible large memory usage when parsing font data...
EUVD-2026-90367
pypdf: Possible large memory usage for large /ToUnicode streams Follow-up 2...
GHSA-FP3H-C4FM-7VVF pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...