CVE-2026-50787

CVE-2026-50787 — استهلاك غير مُتحكم فيه للموارد في e-SIC Livre الملخص توجد ثغرة استهلاك الموارد في مكوّن توليد الكابتشا CAPTCHA في e-SIC Livre esiclivre. يقبل نقطة النهاية المُعرَّضة معاملات يتحكم بها المستخدم تُحدد أبعاد صورة الكابتشا، وحجم الخط، وعدد الأحرف المطلوب عرضها. تُستخدم هذه القيم دون...

The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-36958

CVE-2026-36958 : Déni de service via des requêtes HTTP concurrentes ID CVE : CVE-2026-36958 Date : 2026-04-29 Découvreur : Kirubel Solomne Fournisseur : U-SPEED Produit : Routeur U-SPEED Version du firmware : V1.0.0 CWE : CWE-400 - Consommation de ressources incontrôlée Description Le firmware...

CVE-2026-38361

CVE-2026-38361: Множественные уязвимости типа «Отказ в обслуживании» DoS без аутентификации в dash-uploader...

CVE-2026-31899

CVE-2026-31899: Exponentieller DoS durch rekursive -Element-Verstärkung in CairoSVG Schlüsselwörter: CVE-2026-31899, CairoSVG, exponentieller DoS, SVG-Bombe, rekursives use-Element, Denial-of-Service, XML-Verstärkung, Python SVG-Schwachstelle, CWE-400, unkontrollierter Ressourcenverbrauch, Billio...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 رفض الخدمة عبر استنزاف تجمع اتصالات قاعدة البيانات في الإصدارات ≤ 1.2.10 📌 نظرة عامة يوثق هذا المستودع اكتشافي والإفصاح المسؤول عن CVE-2026-23842 ، وهي ثغرة رفض خدمة عالية الخطورة في ChatterBot. استشارة GitHub: GHSA-v4w8-49pv-mf72 معرّف CVE: CVE-2026-23842 CWE: CWE-400 استهلاك موار...

CVE-2021-35492

Informations sur l'exploit Titre de l'exploit : Wowza Streaming Engine 4.8.11+5 - Déni de service CVE : CVE-2021-35492 Date : 2021-10-06 Auteur de l'exploit : N4nj0 Lien du logiciel : https://www.wowza.com/products/streaming-engine Version : 4.8.11+5 Testé sur : Wowza Streaming Engine = 4.8.11+5...

POC_CVE-2024-12537

CVE-2024-12537 Lab DoS sul Formato Codice di Open WebUI Questo repository contiene un laboratorio di riproduzione locale e isolato e un candidato template nuclei per CVE-2024-12537, una vulnerabilità di denial-of-service non autenticata nell'endpoint di formattazione del codice di Open WebUI. Il...

EUVD-2026-66190

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...

CVE-2026-71360

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-71360

CAI Content Credentials (Adobe) is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400) that can lead to an application denial-of-service . An unauthenticated, network-based attacker can exhaust system resources without user interaction, causing an availability impact rated HI...

EUVD-2026-65622

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-71360 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

logrus-dos-poc

CVE-2025-65637: Sicherheitslücke für Denial-of-Service in Logrus Dieses Verzeichnis enthält Proof-of-Concept-Code und Testskripte für die Denial-of-Service DoS-Sicherheitslücke in github.com/sirupsen/logrus, die als CVE-2025-65637 eingetragen ist. Zusammenfassung der Sicherheitslücke CVE-ID :...