bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

CVE-2026-84243 gettext: Directory traversal via the LANGUAGE environment variable

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-84243

The gettext family of functions in GNU C Library version 2.0 and later is vulnerable to a directory traversal because it accepts entries in the LANGUAGE environment variable containing / or .. (unless the program is AT_SECURE). An attacker who can control this variable can force the program to lo...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

cve-2025-14847-scanner.py...

EUVD-2026-114246

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privilege...

Tool_Camera_Exploit_Netwave_CVE-2018-6479

ToolCameraExploitNetwaveCVE-2018-6479 Vulnerability allowing denial of service on Netwave Camera CVE-2018-6479. CVE-2018-6479: https://vulners.com/cve/CVE-2018-6479 a. Access the camera: b. Proceed to use the tool to exploit the denial of service vulnerability on the device: Enter the device's IP...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/21336/ Author Alex Hernandez aka @alt3kx...

CVE-2026-119762 Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...

CVE-2026-119762 Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...

CVE-2026-119762

Axigen Mail Server versions before 10.5.69 , 10.6.x before 10.6.40 , and 10.7.x before 10.7.2 are vulnerable to an unauthenticated denial of service (DoS) . The root cause is unbounded nesting depth during the parsing of SOAP/XML and JSON request bodies before authentication. An attacker can send...

EUVD-2026-114239

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...

CVE-2026-61826

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the apinsplex namespace in bazarr/api/plex/oauth.py omits @authenticate on its Resource handlers, while normal APIs require an API key and no global authentication hook compensates. Anonymous callers can invoke POST...

DEBIAN-CVE-2026-119299

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeSCTPInit, decodeSCTPShutdown, decodeSCTPError, decodeSCTPSack, and decodeSCTPParameter without checking that each chunk...

CVE-2026-119299

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeSCTPInit, decodeSCTPShutdown, decodeSCTPError, decodeSCTPSack, and decodeSCTPParameter without checking that each chunk...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

EUVD-2026-114256

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the apinsplex namespace in bazarr/api/plex/oauth.py omits @authenticate on its Resource handlers, while normal APIs require an API key and no global authentication hook compensates. Anonymous callers can invoke POST...

CVE-2026-61826

In versions prior to 1.5.7-beta.14 , Bazarr is vulnerable to unauthorized configuration tampering and Server-Side Request Forgery (SSRF) . The api_ns_plex namespace in bazarr/api/plex/oauth.py fails to include the @authenticate decorator, allowing anonymous callers to bypass API key requirements....

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 Proof-of-Concept Overview This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786. It will trigger the integer overflow and cause an infinite loop. The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16. For a comprehensive...