VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...

nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames

A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service...

No title provided

A flaw was found in zod. A remote attacker can trigger a denial of service DoS by submitting an excessively large array of invalid items to an application that validates input schemas without length constraints. Because the validation process accumulates error records for each failing element...

php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information: 28 October 2026 16:46 CET Software list last status update: 9 November 2026 09:49 CET TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities tracked by CERT-EU as...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames

A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

php-5.4-cve-2026-php2shell-patch

php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...

php-eol-cve-2026-109618-109619

CVE-2026-109618 / CVE-2026-109619 patches for end-of-life PHP 7.3 on EL7, 5.4 / 5.3 on Amazon Linux Unofficial backports of the PHP security team's minimal mitigation for the two critical, unauthenticated remote code execution vulnerabilities announced on 2026-10-21: CVE| Advisory| Summary...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

EulerOS Virtualization 2.15.0 : polkit (EulerOS-SA-2026-4718)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the...

EulerOS Virtualization 2.15.1 : polkit (EulerOS-SA-2026-4660)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the...

org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation

A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory OOM error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Preallocation of size page table using device address Commit 0a8224058a58 “drm/imagination: Fix page count for page table for map interface” passed the device address to pvrmmuopcontextcreate. However, the...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619: PHP stale session state, isolated lab reprodu...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618-CVE-2026-109619-POC PHP2Shell — PHP Core M...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 Unauthenticated remote code execution in vuln...

CVE-2026-102463

A flaw was found in vertx-pg-client. The binary array decoder does not enforce an upper bound on server-declared array dimensions during memory allocation. A malicious database server or an on-path attacker intercepting an unencrypted connection can exploit this flaw by sending a crafted message...

Astra Linux – vulnerability in php8.2

PHP utilizes longjmp to handle out-of-memory OOM errors, causing it to exit its current context and terminate request processing. However, certain contexts fail to account for this scenario, leaving request memory in an uninitialized state prior to allocation. This memory can then be read or used...

Security Bulletin: Vulnerability in Browserslist affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Browserslist has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...