CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我々は、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰還するまで、我々は休むことはありません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107 エクスプロイト 🚀 このリポジトリには、Apache CloudStack の深刻な脆弱性 CVE-2024-41107 に対するエクスプロイトが含まれています。この脆弱性は、バージョン 4.5.0 から...

awesome-devsecops

Awesome DevSecOps GitHub의 awesome- 트렌드에서 영감을 받았습니다. 이곳은 DevSecOps 임무를 지원하는 문서, 프레젠테이션, 비디오, 교육 자료, 도구, 서비스 및 일반적인 리더십을 모아 놓은 컬렉션입니다. 이들은 DevSecOps 실험을 준비하거나 자신만의 DevSecOps 프로그램을 구축하는 데 도움이 되는 필수 구성 요소와 유용한 정보입니다. 이 목록은 완전하지 않으며 DevSecOps가 성숙함에 따라 변경될 것입니다. 커뮤니티가 DevSecOps의 구현과 채택 방식을 배우고 개선함에 따라...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

EUVD-2026-70370

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85100

A resource consumption vulnerability in 2FastLabs agent-squad (versions up to 1.1.4 ) affects the function AgentSquad.routeRequest within the Streaming Agent Response Workflow component (file agent-squad/typescript/src/orchestrator.ts). The flaw allows a remote attacker with low privileges to tri...

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

EUVD-2026-70284

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

CVE-2026-84886

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-38361

CVE-2026-38361: dash-uploader における複数の未認証 DoS 脆弱性...

CVE-2026-31899

CVE-2026-31899: CairoSVG の再帰的 要素増幅による指数関数的 DoS キーワード: CVE-2026-31899、CairoSVG、指数関数的 DoS、SVG 爆弾、再帰的 use 要素、サービス妨害、XML 増幅、Python SVG の脆弱性、CWE-400、制御不能なリソース消費、billion laughs SVG 目次 概要 脆弱性の詳細 技術的分析 概念実証 影響 対策...

CVE-2026-26336-PoC

CVE-2026-26336 — Alfresco Share 認証なしファイル読み取り 概要 Alfresco Share は、静的リソースを配信するために /share/page/resource/ エンドポイントを公開しています。脆弱性のあるバージョンでは、このエンドポイントがパストラバーサルを適切に制限しておらず、認証されていない攻撃者が Share Webアプリケーション内（および同じ Tomcat インスタンスにデプロイされた可能性のある兄弟 Webアプリケーション内）の任意のファイルを読み取ることができます。 影響を受けるバージョン Alfresco Community...

EUVD-2021-34869

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2025-56223

CVE-2025-56223 Denial of Service – Upload Document API Description An attacker can rapidly upload a large volume of files to cause denial of service. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Nadi...

ResourcePoison

この問題の修正はCVE-2025-22441として公開されています: bulletin patch follow up ApplicationInfoの受け渡し ApplicationInfoは、インストールされたアプリに関するさまざまな情報を定義する構造体であり、特にリソースとコードが読み込まれるAPKファイルへのパスが最も重要です。...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 データベース接続プール枯渇によるサービス拒否（≤ 1.2.10） 📌 概要 このリポジトリは、ChatterBot における高深刻度のサービス拒否（Denial-of-Service）脆弱性である CVE-2026-23842 の発見と責任ある開示（responsible disclosure）を文書化したものです。 GitHub Advisory: GHSA-v4w8-49pv-mf72 CVE ID: CVE-2026-23842 CWE: CWE-400（制御されないリソース消費） 深刻度: 高（7.5 / 10）...