CVE-2025-12748

CVE-2025-12748 Eng Rus Авторы: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 Английский Описание Обнаружена проблема в процедуре обработки XML-файла. Обработка содержимого файла выполняется до проверки ACL. Это позволяет пользователю с ограниченными правами отправить...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

DEBIAN-CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-84310

A flaw was found in pypdf. A remote attacker could craft a malicious PDF document with specially designed outlines. Processing this document would cause the pypdf library to consume excessive processing time and memory, leading to a Denial of Service DoS condition. This vulnerability is due to a...

CVE-2025-3500-Poc

실습: CVE-2025-3500 - Avast 안티바이러스 권한 상승의 정수 오버플로우 다운로드 실습 ZIP 다운로드 : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 개요 이 저장소는 Windows 플랫폼의 Avast Antivirus 버전 25.1.981.6에서 발생하는 정수 오버플로우 취약점CWE-190인 CVE-2025-3500 연구를 위한 실습 환경을 제공합니다. 이 취약점은 안티바이러스 엔진의...

jira-ssrf

jira-ssrf CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet 버전 1.3.0 이상 1.9.12 미만 및 버전 2.0.0 이상 2.0.4 미만은 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스의 콘텐츠에 접근하거나 XSS 공격을 수행할 수 있게 합니다...

EUVD-2026-69634

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...

EUVD-2026-69628

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-78592

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...

CVE-2026-72682

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only low, read-level Agent Builder privileges could submit a specially crafted request that causes Kibana to consume an unbounde...

CVE-2026-72652

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...

CVE-2026-33465

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

EUVD-2026-69607

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

CVE-2026-84310 pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-84310

pypdf , a pure-Python PDF library, is vulnerable to denial-of-service via crafted PDFs. The vulnerable component is the _get_outline function in pypdf/_doc_common.py, which lacks global entry-count and nesting-depth limits during outline traversal. A malicious PDF with a large number of outline e...

CVE-2026-84310 pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

bypass360mimikatz_x64

Метод: изменить ресурсы, добавить цифровую подпись Пароль для распаковки: 6613kris清水川崎...

http-stalling-detector

HTTP Stalling Detector HTTPスタリング型DoS攻撃は、Webサーバーが、リモートクライアントが単に 低速リンク経由で接続しているだけなのか、それともWebサーバーがローカル システムリソースを保護するためにタイムアウトして接続を切断するのを 防ぐべく、意図的にデータを非常にゆっくり送信しているのかを判別できない という特性を悪用します。攻撃者に典型的に見られる挙動は、多数の接続を 開き、Webサーバーが接続をタイムアウトさせないようにデータを少しずつ ゆっくり送り出すことです。Webサーバーが比較的小規模なワーカープールを...

EUVD-2026-69559

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...