The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2021-35492

익스플로잇 정보 익스플로잇 제목: Wowza Streaming Engine 4.8.11+5 - 서비스 거부 CVE: CVE-2021-35492 날짜: 2021-10-06 익스플로잇 작성자: N4nj0 소프트웨어 링크: https://www.wowza.com/products/streaming-engine 버전: 4.8.11+5 테스트 환경: Wowza Streaming Engine = 4.8.11+5 취약점 권고: https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ Wow...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

CVE-2026-38361

CVE-2026-38361: dash-uploader의 다중 인증되지 않은 DoS 취약점...

CVE-2026-31899

CVE-2026-31899: CairoSVG の再帰的 要素増幅による指数関数的 DoS キーワード: CVE-2026-31899、CairoSVG、指数関数的 DoS、SVG 爆弾、再帰的 use 要素、サービス妨害、XML 増幅、Python SVG の脆弱性、CWE-400、制御不能なリソース消費、billion laughs SVG 目次 概要 脆弱性の詳細 技術的分析 概念実証 影響 対策...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 通过数据库连接池耗尽导致的拒绝服务（影响版本 ≤ 1.2.10） 📌 概述 本仓库记录了我对 ChatterBot 中高危拒绝服务漏洞 CVE-2026-23842 的发现和负责任披露过程。 GitHub 安全公告：GHSA-v4w8-49pv-mf72 CVE 编号：CVE-2026-23842 CWE：CWE-400（未受控制的资源消耗） 严重性：高危（7.5 / 10） CVSS：3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 🚨 漏洞摘要 ChatterBot 版本 ≤ 1.2.10...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

CVE-2026-50787

CVE-2026-50787 — e-SIC Livre의 통제되지 않은 리소스 소비 요약 e-SIC Livre esiclivre 의 CAPTCHA 생성 구성 요소에 리소스 소비 취약점이 존재합니다. 취약한 엔드포인트는 CAPTCHA 이미지 크기, 글꼴 크기 및 렌더링할 문자 수를 정의하는 사용자 제어 매개변수를 허용합니다. 이러한 값은 적절한 범위 검사 없이 사용됩니다. 인증되지 않은 원격 공격자는 과도하게 큰 값을 제공하여 이미지 생성 및 텍스트 렌더링 중에 애플리케이션이 상당한 메모리와 CPU 리소스를 소비하도록 할 수 있습니...

CVE-2026-36958

CVE-2026-36958: 동시 HTTP 요청을 통한 서비스 거부Denial of Service CVE ID: CVE-2026-36958 날짜: 2026-04-29 발견자: Kirubel Solomne 공급업체: U-SPEED 제품: U-SPEED 라우터 펌웨어 버전: V1.0.0 CWE: CWE-400 - 통제되지 않은 리소스 소비 설명 U-SPEED 라우터 펌웨어 V1.0.0은 서비스 거부Denial of Service 취약점에 노출되어 있습니다. 공격자는 웹 관리 인터페이스의 임의 또는 존재하지 않는 엔드포인트에 대량의...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...

UBUNTU-CVE-2026-82075

An uncontrolled resource consumption weakness exists in the request-ha...

Linux Distros Unpatched Vulnerability : CVE-2026-82075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded- cluster router process. A client that has network acce...

Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)

The version of Kibana installed on the remote host is 8.x prior to 8.19.17, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-31 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

CVE-2026-82075

An uncontrolled resource consumption weakness exists in the request-ha...

The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...