CVE_2023_44487-Rapid_Reset

CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This enhanced version provides granular control over testing parameters, multiple attack patterns, and advanced monitoring capabilities...

CVE-2026-118694

python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated 'a' or '!a' sequences, causing findbalanced to rescan the remaining document for each link...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-115274

The Elixir standard library's JSON module is vulnerable to a denial of service (DoS) via CPU and memory exhaustion due to unbounded integer parsing in JSON.decode/1 and JSON.decode!/1. The functions use erlang:binary_to_integer/1 to convert integer literals without bounding their length; a litera...

EEF-CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integ...

EUVD-2026-113758

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...

CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...

CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...

CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Usage python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

EEF-CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821

The Elixir standard library's URI module contains an Improper Validation of Specified Quantity in Input vulnerability in URI.parse/1. The split_authority/1 function converts the port component using String.to_integer/1 without bounding its length. This allows an attacker to provide a URL with a p...

EUVD-2026-113757

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2023-1545-POC-python

CVE-2023-1545-POC-python CVE-2023-1545-POC with python...

Spring4Shell-Python-Firewall-POC

Python Firewall for Spring4Shell CVE-2022-22965 Mitigation 1. Overview This project is a simple but effective firewall implemented as a Proof-of-Concept POC in Python. It's designed to act as an HTTP server that inspects incoming POST requests to detect and block the specific payload pattern...

CVE-2025-47577

CVE-2025-47577 A proof of concept developed to exploit CVE-2025-47577. Based on PatchStack's article. Usage usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list...

EUVD-2026-113751

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...

CVE-2026-59396

A Denial of Service (DoS) vulnerability exists in the UAA private_key_jwt client-authentication mechanism, specifically in how it handles and caches remote JWKS URIs . When UAA fetches a remote jwks_uri, it caches the response body. An attacker with prerequisites—such as write access to clients o...

CVE-2026-59396 DoS Vulnerability in UAA Related to JWKS URI Handling

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...