CVE-2026-90584

TooTallNate Java-WebSocket versions up to 1.6.1 are affected by a resource allocation flaw in the Fragmentation Handler , specifically the processFrameContinuousAndNonFin function in Draft_6455.java. A remote attacker with no authentication can trigger the weakness, resulting in low availability ...

cve

CVE Enunciado del problema: Stackoverflow Estoy intentando compilar mi proyecto en Docker, así que estoy usando Docker Desktop para compilar mi proyecto; cuando compilo la imagen, obtengo esto como una de mis vulnerabilidades root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources...

CVE-2025-3500-Poc

Laboratorio: CVE-2025-3500 - Desbordamiento de Enteros en la Escalada de Privilegios de Avast Antivirus Descargar Descargar ZIP del Laboratorio : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 Resumen Este repositorio proporciona un entorno de...

CVE-2026-57099

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

CVE-2026-72978

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-69374

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-57099

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-73886

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-57099

ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...

EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

CVE-2026-72978

CVE-2026-72978 is a Medium severity (CVSS 5.9) denial-of-service vulnerability in Active Directory Federation Services (AD FS) . The root cause is allocation of resources without limits or throttling , allowing an unauthorized, unauthenticated attacker to cause a remote denial of service . The at...

EUVD-2026-73251

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-48888

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888

CVE-2026-48888 affects the WooCommerce WordPress plugin by Automattic , versions before 11.1.0 . The vulnerability is classified as Allocation of Resources Without Limits or Throttling , enabling an unauthenticated attacker to trigger an HTTP Denial of Service over the network with low complexity...

CVE-2026-86513

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

EUVD-2026-72614

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

CVE-2026-86513

A remote, unauthenticated resource allocation vulnerability exists in the JSON Pointer parser component of java-json-tools jackson-coreutils 2.0 , specifically in the TreePointer.tokensFromInput function within TreePointer.java. The flaw can be triggered remotely without authentication, resulting...