47245 matches found
CVE-2021-35492
Exploit Information Exploit Title: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 Date: 2021-10-06 Exploit Author: N4nj0 Software Link: https://www.wowza.com/products/streaming-engine Version: 4.8.11+5 Tested on: Wowza Streaming Engine = 4.8.11+5 Vulnerability Advisory:...
SUSE CVE-2026-84326
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
sprig-mvc-demo-patch
sprig-mvc-demo-patch 이 데모 애플리케이션은 CVE-2024-38828 취약점을 부분적으로 다룹니다. Spring Framework의 CVE-2024-38828 취약점은 byte 유형의 매개변수를 허용하는 Spring MVC 컨트롤러에 크거나 특수하게 조작된 요청을 전송하여 "서비스 거부"DoS 공격을 수행할 수 있게 합니다. 이로 인해 메모리와 CPU에 과부하가 발생하고 리소스 부족으로 애플리케이션이 중단될 수 있습니다. 이 데모 애플리케이션에서는 대용량 파일 업로드와 관련된 취약점을 해결하기 위해 사용자 정...
Spring Framework Path Traversal in Functional Web Frameworks
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
DoS-Braces-3.03
CVE候補: カンマ区切りのブレース展開によるbracesのサービス拒否 パッケージ: braces npm バージョン: 3.0.3 最新 深刻度: 高 CVSS 7.5 CWE: CWE-400 制御されないリソース消費 ステータス: 未報告 注記: これは独立した調査結果です。CVE-2024-4068は入力長の制限（MAXLENGTH=10000）に対応しましたが、カンマ区切りのブレースパターンによる組み合わせ爆発は修正していません。CVE-2026-45149は 別の...
CVE-2026-44578
🚨 CVE-2026-44578 — Next.js SSRF 취약점 📌 개요 CVE-2026-44578 은는 자체 호스팅 Next.js 애플리케이션에 영향을 미치는 고심각도 서버 측 요청 위조SSRF 취약점입니다. 공격자는 조작된 WebSocket 업그레이드 요청 을 악용하여 서버가 내부 또는 외부 시스템에 아웃바운드 요청을 보내도록 강제할 수 있습니다. ⚠️ 영향 이 취약점으로 인해 공격자가 다음에 접근할 수 있습니다: 대상| 위험 ---|--- 🔐 내부 API| 무단 내부 액세스 ☁️ 클라우드 메타데이터 엔드포인트| 자격 증명...
CVE-2026-19500-poc
CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...
CVE-2024-38856-ApacheOfBiz
CVE-2024-38856-ApacheOfBiz Apache OFBiz は、オープンソースのエンタープライズリソースプランニングシステムです。企業の多くのビジネスプロセスを統合および自動化する一連のエンタープライズアプリケーションを提供します。 CVE-2024-38856 は、Apache OFBiz における認証前の脆弱性であり、リモートコード実行につながる可能性があります。 影響を受けるバージョン : 18.12.15 より前のバージョン 使用例: python3 scanner.py https://localhost:8443/ python3 exploit.py...
CVE-2019-20372
참고 https://bertjwregeer.keybase.pub/2019-12-10%20-%20errorpage%20request%20smuggling.pdf 서버 실행 docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6 익스플로잇 printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET /hidden/index.html...