CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...

EEF-CVE-2026-115274 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integ...

CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821

The Elixir standard library's URI module contains an Improper Validation of Specified Quantity in Input vulnerability in URI.parse/1. The split_authority/1 function converts the port component using String.to_integer/1 without bounding its length. This allows an attacker to provide a URL with a p...

EEF-CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Summary Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

EUVD-2026-113757

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2026-109821 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2023-1545-POC-python

CVE-2023-1545-POC-python CVE-2023-1545-POC with python...

CVE-2025-47577

CVE-2025-47577 A proof of concept developed to exploit CVE-2025-47577. Based on PatchStack's article. Usage usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list...

CVE-2026-59396 DoS Vulnerability in UAA Related to JWKS URI Handling

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...

EUVD-2026-113751

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...

CVE-2026-59396 DoS Vulnerability in UAA Related to JWKS URI Handling

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...

CVE-2026-59396

A Denial of Service (DoS) vulnerability exists in the UAA private_key_jwt client-authentication mechanism, specifically in how it handles and caches remote JWKS URIs . When UAA fetches a remote jwks_uri, it caches the response body. An attacker with prerequisites—such as write access to clients o...

CVE-2026-119280

A flaw was found in MariaDB Connector/J. A malicious database server or an attacker intercepting network traffic can trigger a Denial of Service DoS by returning crafted transaction identifier lengths during distributed transaction XA recovery. Because the connector does not validate these length...

EUVD-2026-113750

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

CVE-2026-115456 Gcc: out-of-bounds read in std::from_chars

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

CVE-2026-115456

A flaw in gcc allows an attacker to cause a Denial of Service (DoS) by passing a non-null-terminated string to the std::from_chars() function in the libstdc++ library. This vulnerability triggers an out-of-bounds read beyond the allocated buffer, which may result in an application crash or invali...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

CVE-2026-114690

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the...