CVE-2025-34226

CVE-2025-34226: Постоянный DoS в среде выполнения OpenPLC Краткий обзор уязвимости Поле| Значение ---|--- CVE ID| CVE-2025-34226 Затрагивает| OpenPLC Runtime V3 Исправлено в| коммит 095ee09623dd229b64ad3a1db38a901a3772f6fc Серьёзность| Высокий CVSS 4.0|...

CVE-2026-101161

The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when the WP Ultimate Review WordPress plugin...

CVE-2022-43293

Эксплойты для CVE-2022-43293 Чтобы получить постоянный отказ в обслуживании Windows как показано в POC выше, просто запустите Exploit.bat и введите %windir%\system32\cng.sys, когда вас спросят, какой файл вы хотите перезаписать. Здесь вы можете найти мой отчёт об уязвимости произвольной...

CVE-2025-70886

CVE-2025-70886 Эксплойт Proof of Concept PoC для CVE-2025-70886, уязвимости постоянного отказа в обслуживании в Halo CMS v2.22.4 и более ранние версии, которая позволяет удаленным злоумышленникам вызывать сбой интерфейса комментариев администратора путем отправки некорректных полезных нагрузок...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc Multiple Vulnerabilities (crlsa-2020_4490)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204490 advisory. GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS CVE-2019-13050 Tenable h...

BIT-MONGODB-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

BIT-MONGODB-2026-82057 Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...

CVE-2026-28617

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74016

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73976

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

A persistent denial of service vulnerability exists in the VoiceInteractionManagerService.java file within the initForUserNoTracing function. The root cause is resource exhaustion , which could lead to a local denial of service. Exploitation requires no additional execution privileges and does no...

CVE-2026-28617

A vulnerability exists in the WifiNetworkSuggestionsManager.java component, leading to a possible persistent Denial of Service (DoS) due to resource exhaustion . This flaw allows for a local DoS attack without requiring additional execution privileges or user interaction. The vulnerability affect...

EUVD-2026-73966

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-82065

CVE-2026-82065 affects the MongoDB Server storage engine integration layer. An authenticated user with collection creation privileges can supply malformed storage configuration options that bypass validation and are persisted to durable metadata. When that metadata is later read by diagnostic ope...

Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-28666: Incorrect Authorization

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87158

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A security issue in the storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validati...

CVE-2026-85239

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...