60553 matches found
ManualRsrcDataFetching
ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. Note: Payload.ico is a x64 calc shellcode...
Wordpress-DOS-Attack-CVE-2018-6389
Wordpress-DOS-Attack-CVE-2018-6389 Load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. $ chmod +x Execute.sh $ ./Execute.sh How it Works! The problem lies upon the load-scripts.php file, which purpose is to retrieve several Javascript packag...
CVE-2026-50338
CVE-2026-50338 Spring Cloud Azure B2C Resource Server Cross-Issuer Authentication Bypass Description AadB2cResourceServerAutoConfiguration in spring-cloud-azure-autoconfigure builds a JwtDecoder that trusts six AAD-line issuers login.microsoftonline.com, sts.windows.net, sts.chinacloudapi.cn, v1...
CVE-2023-47564
CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the...
-CVE-2024-39614
Proof of Concept PoC for Denial-of-Service Vulnerability in Django This repository contains a Proof of Concept PoC script demonstrating a denial-of-service DoS vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. The vulnerability lies in the getsupportedlanguagevariant...
CVE-2019-9849
CVE-2019-9849: Remote bullet graphics retrieved in “stealth mode” in LibreOffice LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable...
EUVD-2026-98089
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-97975
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
PT-2026-113531
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...
PT-2026-111742
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...
PT-2026-111743
A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...
PT-2026-112713
Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...
PT-2026-113523
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...
PT-2026-112715
Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An unauthorized attacker can disclose information over a network due to the use of an uninitialized resource within the Windows Routing and Remote Acces...
PT-2026-112268
Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network through resource...
Microsoft ASP.NET: CVE-2026-96236: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2026-113050
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2026-113449
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
Microsoft .NET Framework: CVE-2026-96960: .NET Denial of Service Vulnerability
Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-113522
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...