cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Disclaimer: Questo codice è destinato esclusivamente a scopi didattici e test di sicurezza autorizzati. Gli attacchi non autorizzati su sistemi di terzi sono illegali. Vulnerabilità CVE-2025-26466 è una vulnerabilità Denial-of-Service DoS...

CVE-2024-24549

Apache Tomcat DoS Exploit CVE-2024-24549 Beschreibung Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für einen Denial-of-Service-Angriff DoS gegen Apache Tomcat Version 9.0.83 , basierend auf einem Problem, das bei der Verarbeitung von HTTP-Headern und Nutzlasten identifiziert wurde...

CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 Exploit PoC Panoramica Questo repository contiene uno script che sfrutta la vulnerabilità CVE-2023-22622 in WordPress, causando una Denial of Service DoS tramite WP-Cron. Questo script può essere utilizzato per inondare un sito WordPress vulnerabile con richieste,...

overload

Overload Uno strumento di stress test di rete basato su Python che utilizza metodi di attacco di Livello 2, Livello 4 e Livello 7 per test di sicurezza autorizzati. !WARNING Questo progetto è stato archiviato e non è più mantenuto attivamente. Sebbene il codice sorgente sia ancora disponibile, no...

CVE-2025-46171

vBulletin 3.x.x - DoS tramite sovraccarico della Buddy List Riepilogo L'endpoint /misc.php?do=buddylist esegue un'unica grande query JOIN che recupera tutti gli amici insieme alle loro informazioni utente e di sessione per verificarne lo stato online. Poiché questa query elabora l'intera lista...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Advisory 15 - 00/00/06 Programma: phpBB 2.0.15 Homepage: http://www.phpbb.com Versioni Vulnerabili: phpBB 2.0.15 e versioni precedenti Rischio: Alto!! Impatto: Molteplici vulnerabilità DoS. Descrizione phpBB è un potente sistema di bacheca open source completamente...

CVE-2026-18466 WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...

DEBIAN-CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

CVE-2026-23934

An authenticated user with low privileges can send crafted requests to the Frontend validate.api.exists action in Zabbix, causing disproportionate CPU load and potential denial of service (CVSS 5.1 Medium, adjacent network). No exploitation details or patch version are provided in the documents. ...

CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service...

GHSA-7P4M-QXVV-G567 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

EUVD-2025-210652

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

Important: runfinch-finch

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

CVE-2026-64359

A flaw was found in the Linux kernel's nilfs2 filesystem. This vulnerability occurs because user-supplied segment numbers are not properly validated before processing CLEANSEGMENTS ioctl requests. An attacker, by providing out-of-range segment numbers, can trigger excessive logging. This prolonge...

CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React...

Denial Of Service

React Router is vulnerable to Denial Of Service. The vulnerability is due to insufficient protection of the manifest endpoint, where unauthenticated targeted requests can generate excessive server load, allowing attackers to degrade application performance and slow response times...

urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...

SUSE-SU-2026:3137-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 2.2.10git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in sasliorecv can lead to a heap buffer overflow when processing a specially crafted oversized LDAP UNBIND packet bsc1270695. - CVE-2026-11611...