Project-CVE-2026-65351

PAYLOAD DE BOMBA DE NAVEGADOR / AGOTAMIENTO DE RECURSOS Una descripción general y análisis del script de prueba de estrés para navegadores desarrollado por Xer0TLabs & Persephrak Decentralized Syndicate. ADVERTENCIA: Solo para fines educativos, de investigación y de pruebas autorizadas. Ejecutar...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Aviso 15 - 00/00/06 Programa: phpBB 2.0.15 Página principal: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.15 y versiones anteriores Riesgo: ¡¡Alto riesgo!! Impacto: Múltiples vulnerabilidades DoS. Descripción phpBB es un paquete de foros de código abierto de alto...

CVE-2024-24549

Apache Tomcat DoS Exploit CVE-2024-24549 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para un ataque de denegación de servicio DoS contra Apache Tomcat versión 9.0.83 , basado en un problema identificado en el manejo de encabezados HTTP y cargas útiles. Este script...

CVE-2023-22622

PoC del Exploit DoS WP-Cron - CVE-2023-22622 Resumen Este repositorio contiene un script que explota la vulnerabilidad CVE-2023-22622 en WordPress, provocando una Denegación de Servicio DoS a través de WP-Cron. Este script puede utilizarse para inundar un sitio WordPress vulnerable con peticiones...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Aviso: Este código está destinado exclusivamente a fines educativos y pruebas de seguridad autorizadas. Los ataques no autorizados contra sistemas ajenos son ilegales. Vulnerabilidad CVE-2025-26466 es una vulnerabilidad de denegación de servicio DoS de...

overload

Overload Una herramienta de pruebas de estrés de red basada en Python que incluye métodos de ataque de Capa 2, Capa 4 y Capa 7 para pruebas de seguridad autorizadas. !WARNING Este proyecto ha sido archivado y ya no se mantiene activamente. Aunque el código fuente sigue disponible, no se planean...

CVE-2025-46171

vBulletin 3.x.x - DoS mediante sobrecarga de la lista de amigos Resumen El endpoint /misc.php?do=buddylist ejecuta una única consulta JOIN grande que recupera todos los amigos junto con su información de usuario y sesión para verificar el estado en línea. Debido a que esta consulta procesa toda l...

TrackFlood: Relocating Latency Attacks from NMS-Free Detectors to Real-Time Trackers

We consider latency attacks on object detectors, where the attacker's goal is not to corrupt a prediction but to make the system fail to respond in time, targeting real-time applications such as autonomous driving. Modern object detectors eliminate Non-Maximum Suppression NMS through one-to-one...

Astra Linux – Vulnerability in unbound, bind9

The “Closest Encloser Proof” aspect of the DNS protocol as described in RFC 5155, when the guidance provided in RFC 9276 is skipped enables remote attackers to cause a denial of service resulting in high CPU usage for SHA-1 calculations through DNSSEC responses during a random subdomain attack,...

What the Data Says About AI in Security Operations in 2026

AI is officially mainstream in security operations. According to Prophet Security's State of AI in Security Operations 2026 report produced from ViB’s survey of 250+ cybersecurity pros, 40% of security teams now use AI daily. Another 56% are currently testing it out, and only 4% have no plans to...

SUSE CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

CVE-2026-18466 WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...

CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service...

DEBIAN-CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

CVE-2026-23934

An authenticated user with low privileges can send crafted requests to the Frontend validate.api.exists action in Zabbix, causing disproportionate CPU load and potential denial of service (CVSS 5.1 Medium, adjacent network). No exploitation details or patch version are provided in the documents. ...

CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service...

PT-2026-76960

Name of the Vulnerable Software and Affected Versions Frontend affected versions not specified Description An authenticated user can cause excessive CPU load on the webserver by sending specially crafted requests to the 'validate.api.exists' API endpoint, which may result in a denial of service...

GHSA-7P4M-QXVV-G567 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...