CVE-2025-3500-Poc

Lab: CVE-2025-3500 - Integer Overflow in Avast Antivirus Privilege Escalation Download Download Lab ZIP : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 Overview This repository provides a lab environment for researching CVE-2025-3500, an integer...

cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...

CVE-2026-126938

Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the serv...

EUVD-2026-125127

Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the serv...

CVE-2026-126938

Zipline versions before 4.6.4 are susceptible to a resource allocation vulnerability (CWE-770) that allows authenticated users to bypass chunked-upload size and quota limits. By forging Content-Range headers with large declared offsets while sending small data chunks to the partial upload endpoin...

CVE-2026-126938 Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headers

Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the serv...

CVE-2026-126938 Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headers

Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the serv...

CLEANSTART-2026-CY19546 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser

A flaw was found in the Qt Quick Text component of Qt. Due to missing validation of the width and height attributes in image tags, an attacker can trigger excessive resource allocation by supplying specially crafted content. This flaw allows an application to freeze or become unresponsive,...

CLEANSTART-2026-WR01453 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the strimzi-kafka-operator package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

EUVD-2026-123888

A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to exhaust system resources, potentially resulting in a denial of service DoS...

ROS-20261112-73-0183

A vulnerability in Netty related to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261112-73-0197

The vulnerability in OpenSSL3 is related to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-126244

Fortinet FortiAuthenticator is affected by a resource exhaustion vulnerability [CWE-770] within the fastapi component. An unauthenticated attacker could exploit this lack of limits or throttling to exhaust system resources, potentially leading to a denial of service (DoS) . The vulnerability affe...

qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser

A flaw was found in the Qt Quick Text component of Qt. Due to missing validation of the width and height attributes in image tags, an attacker can trigger excessive resource allocation by supplying specially crafted content. This flaw allows an application to freeze or become unresponsive,...

CLEANSTART-2026-LV29506 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

EUVD-2026-122254

Microsoft Security Advisory CVE-2026-118748 - ASP.NET Core Denial of Service Vulnerability...

EUVD-2026-122256

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

ROS-20261110-73-0123

The Http2Decompress mechanism vulnerability in the Netty framework for developing network applications, servers, and clients is related to uncontrolled resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...