CVE-2025-34226

CVE-2025-34226: OpenPLC Runtimeにおける持続的DoS 脆弱性概要...

CVE-2025-70886

CVE-2025-70886 CVE-2025-70886 の概念実証（PoC）エクスプロイト。この脆弱性は Halo CMS（v2.22.4 およびそれ以前）における持続的なサービス拒否脆弱性であり、遠隔攻撃者が不正なペイロードを送信して管理コメントインターフェースをクラッシュさせることを可能にします。 基本情報 Product Vendor: 凌霞软件 Vendor Website: https://www.lxware.cn/ 影響を受けるオブジェクトタイプ: ソフトウェア / Webアプリケーション 影響を受ける製品: Halo CMS 影響を受ける製品バージョン: =...

CVE-2022-43293

CVE-2022-43293 のエクスプロイト 上記のPOCで示しているような永続的なWindowsサービス拒否（DoS）を発生させるには、Exploit.batを実行し、上書きしたいファイルを尋ねられたら%windir%\system32\cng.sysと入力するだけです。 こちらから、私の任意ファイル書き込み\上書きの脆弱性 レポートを参照できます。 こちらでは、任意ファイル書き込み\上書き プリミティブを使用して 、Windowsサービス拒否（DoS） を達成する方法を理解できます。 こちらから私にユニコーンを買ってくれます 🦄 知識を共有しましょう！...

CVE-2026-28617

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74016

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73976

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

CVE-2026-28633 is a persistent denial of service vulnerability in the initForUserNoTracing method of VoiceInteractionManagerService.java , part of the Android Framework. The root cause is resource exhaustion , which can lead to local denial of service requiring only low privileges and no user int...

CVE-2026-28617

CVE-2026-28617 affects the WiFi subcomponent of Android's Project Mainline, specifically in WifiNetworkSuggestionsManager.java . The root cause is a persistent denial-of-service due to resource exhaustion , enabling a local attacker to degrade device availability without requiring additional priv...

EUVD-2026-73966

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-82065

CVE-2026-82065 affects the MongoDB Server storage engine integration layer. An authenticated user with collection creation privileges can supply malformed storage configuration options that bypass validation and are persisted to durable metadata. When that metadata is later read by diagnostic ope...

Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-85239

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

CVE-2026-85239 MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

CVE-2026-82738

An Improper Input Validation flaw in ash-project ash (Elixir framework) allows an attacker to permanently poison a database record. The Ash.Type.UUIDv7 type's cast_input/2 accepts any well-formed UUID string and stores it as a 16-byte binary. However, on read, cast_stored/2 routes the binary back...