921651 matches found
CVE-2017-0478
CVE-2017-0478 poc of CVE-2017-0478 The file of FrameSequencewebp.cpp is not compiled in AOSP currently, so when you compile libframesequence.so with webp, you need compile with FRAMESEQUENCEINCLUDEWEBPlike this: FRAMESEQUENCEINCLUDEWEBP=true mm -B...
CVE-2024-35333
CVE-2024-35333 A stack buffer overflow vulnerability exists in the charset handling functionality of html2xhtml version 1.3. An attacker can exploit this vulnerability by providing a specially crafted input, which would lead to the overflow of the 'buf' variable located on the stack. Successful...
CVE-2017-12615-poc
-h View usage instructions...
Exploit for CVE-2026-117184
CVE-2026-117184 — Unauthenticated Denial of Service via GraphQ...
CVE_2023_44487-Rapid_Reset
CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This enhanced version provides granular control over testing parameters, multiple attack patterns, and advanced monitoring capabilities...
CVE-2026-118694
python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated 'a' or '!a' sequences, causing findbalanced to rescan the remaining document for each link...
CVE-2026-119053
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...
CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...
CVE-2026-115274
The Elixir standard library's JSON module is vulnerable to a denial of service (DoS) via CPU and memory exhaustion due to unbounded integer parsing in JSON.decode/1 and JSON.decode!/1. The functions use erlang:binary_to_integer/1 to convert integer literals without bounding their length; a litera...
EEF-CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integ...
EUVD-2026-113758
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...
CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...
CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...
CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...
CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...
CVE-2026-109821
The Elixir standard library's URI module contains an Improper Validation of Specified Quantity in Input vulnerability in URI.parse/1. The split_authority/1 function converts the port component using String.to_integer/1 without bounding its length. This allows an attacker to provide a URL with a p...
EEF-CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...
EUVD-2026-113757
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...
CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...