-CVE-2024-39614

Proof of Concept PoC for Denial-of-Service Vulnerability in Django This repository contains a Proof of Concept PoC script demonstrating a denial-of-service DoS vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. The vulnerability lies in the getsupportedlanguagevariant...

CVE-2024-42849

CVE-2024-42849 An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function. Writeup If the password change request is intercepted and a sufficiently long1MB string is supplied as the password to use, system resources will be...

wordpress_DoS

WordPress 4.9.8 is vulnerable to DoS Attacks. Additional Information We found a Denial of Service DoS in WordPress version 4.9.8. An unauthenticated remote user can perform a series of requests on the vulnerable pages, resulting in increased processing, swap and disk I/O on the server. This...

CVE_2023_44487-Rapid_Reset

CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This repository contains both attack testing and verification-focused tools. ⚠️ IMPORTANT DISCLAIMER This tool is for educational and...

CVE-2024-24549

Here’s a README.md for a Proof of Concept PoC demonstrating the Denial of Service DoS vulnerability in Apache Tomcat due to improper input validation of HTTP/2 requests: Proof of Concept PoC for Denial of Service DoS Vulnerability in Apache Tomcat This repository contains a Proof of Concept PoC...

WaSonar

Disclaimer : This tool is for educational purposes and security research only. The developers are not responsible for misuse. Please use responsibly and ethically. WaSonar is a powerful CLI tool designed for educational research, device tracking, and stress testing on the WhatsApp protocol. Built...

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 load-scripts.php 文件，其目的是通过单个请求检索多个 JavaScript 包。 root@kitploit: $ chmod +x Execute.sh $ ./Execute.sh 工作原理！ 问题在于 load-scripts.php 文件，其目的是通过单个请求检索多个 JavaScript 包（如 bootstrap、jquery 和 jqueryUI 等）。 可以通过构造一个特殊请求来检索大量不同的 JavaScript 文件，从而导致高 CPU 资源占用和高带宽使用。...

CVE-2026-18649

CVE-2026-18649 - DoS por crecimiento ilimitado de memoria en GStreamer rtph264depay Prueba de concepto para una vulnerabilidad de agotamiento de recursos en el depayloader H.264 RTP de GStreamer rtph264depay. El mismo patrón también afecta a rtph265depay. Qué es Durante el reensamblaje de RTP...

CVE-2026-0897

CVE-2026-0897 — Google Keras：权重加载中的 HDF5 形状炸弹拒绝服务漏洞 -orange?style=for-the-badge -brightgreen?style=for-the-badge 概述 字段| 详情 ---|--- CVE ID| CVE-2026-0897 软件包| keras（Google Keras） 注册源| PyPI 受影响版本| 3.0.0 至 3.13.0（含） 漏洞类型| CWE-770：无限制或无节流的资源分配 CVSS 分数| 7.1 高危（CVSS 4.0，CNA：Google Inc.） CVSS 向量|...

CVE-2026-89496

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. A local user could exploit this vulnerability by performing a copyfilerange operation within the same filesystem. This can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service DoS...

CVE-2026-89453

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit driver for AMD. This vulnerability occurs when the system handles certain memory access errors, specifically Page Request PPR faults, without properly releasing a reference to a PCI device. This oversight causes a...

CVE-2026-81018

A flaw was found in the Linux kernel's think-lmi driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial of service over time due to resource exhaustion...

CVE-2026-89645

A flaw was found in the btrfs file system in the Linux kernel. During relocation recovery, if an error occurs, such as a memory allocation failure, the system may not properly drop references to relocation roots. This oversight can lead to resource exhaustion, potentially allowing a local attacke...

CVE-2026-89605

A flaw was found in the ecryptfs component of the Linux kernel. When the ecryptfssendmiscdev function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves the context on an allocated list, preventing its reuse. Repeated...

CVE-2026-80996

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification errors. This can lead to calling applications retrying...

CVE-2026-89757

A flaw was found in the Linux kernel's memory management unit MMU, specifically within the multi-generational Least Recently Used mglru mechanism. A bug in how the kernel handles unevictable memory pages can lead to these pages remaining locked in memory even after they should be released. This c...

CVE-2026-89512

A flaw was found in the Linux kernel's remoteproc SCP component. This vulnerability involves a device reference leak, where the system fails to properly release a reference to a device during a driver data lookup. This occurs specifically before the driver has been fully bound. A local attacker...

CVE-2026-89529

A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access RPC/RDMA Read operations. This vulnerability occurs because the Read list decoder does not properly validate the lengths of incoming data segments. An attacker could send...

CVE-2026-81004

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI message handler. When an error occurs during the startup of an IPMI interface, scheduled work may not be properly canceled. This can prevent the interface from being freed cleanly, potentially leading to resourc...

CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...