FreeRDP http_response_recv_body() DoS

The vulnerability of the httpresponserecvbody function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2026-21551

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

lib/helpers/toFormData.js axios Form Issue

The vulnerability of the lib/helpers/toFormData.js module from the axios library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause service failures...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

CVE-2026-53503

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...

GHSA-CQJP-JF4R-H5Q9 Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS

Summary Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C code triggers undefined behavior; on x8664 this reliably results in a...

YAML Uncontrolled Recursion DoS

The vulnerability of the YAML syntax analysis library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the unstable RSC APIs. An attacker can execute unauthorized actions by tricking a user into submitting crafted requests. Note: This is only exploitable if the unstable RSC APIs are enabled in the...

ROS-20260724-73-0032

The vulnerability in dotnet10.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260724-73-0047

The vulnerability of the JOIN::fixallsplittingsinplan function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260724-73-0048

The vulnerability of the JOIN::fixallsplittingsinplan function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ImageMagic CheckPrimitiveExtent Heap Buffer Overflow DoS

The vulnerability of the CheckPrimitiveExtent function in the console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

RDPEAR NDR RDP-client Parser DoS

The vulnerability of the RDPEAR NDR RDP-client FreeRDP lies in a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

PYSEC-2026-3542 vLLM has Remote DoS via Invalid Recovered Token Reinjection

Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to vocabsize, convert that value to -1 when choosing the next live token for a request, and then feed that -1 back into the next drafter input ids. On Qwen3 GPTQ this reach...

Microsoft .NET Framework Buffer Overflow DoS

The vulnerability of the Microsoft .NET Framework software platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Virtual Filtering Platform DoS

The vulnerability of the Virtual Filtering Platform component for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

D-Link DNS-320 DoS

The vulnerability of the “Save Changes and Settings” component in the /web/function/saveajax.php microprogramming system for D-Link DNS-320 network storage devices is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability can allow an...

CVE-2026-16277

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this...

FreeRDP RDP Write Logon Info Buffer Overflow DoS

The vulnerability of the rdpwritelogoninfov2 function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...