CVE-2026-49975

Strumento di riproduzione CVE-2026-49975 HTTP/2 Bomb Autore : polar bear Versione : 2.1 Vulnerabilità applicabile : CVE-2026-49975 bomba di memoria del protocollo HTTP/2 📖 Principio della vulnerabilità CVE-2026-49975 è una vulnerabilità di esaurimento della memoria nell'implementazione del...

CVE-2023-5044

CVE-2023-5044 CVE 2023 5044 के लिए PoC पूर्वापेक्षाएँ Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Docker को सही विशेषाधिकार दें root@kitploit: sudo usermod -aG docker $USER && newgrp docker क्लस्टर को extraPortMaping और node-labels के साथ प्रारंभ करें ताकि इसे ingress के लिए तैयार किया जा...

CVE-2026-75143

A flaw was found in FFmpeg. A heap buffer overflow in the RIST protocol reader allows a remote attacker to trigger memory corruption by sending an oversized packet to an FFmpeg instance receiving a RIST stream. The libristread function ignores its buffer size argument, copying the full payload in...

CVE-2023-48842

should start with " CVE-2023-48842" as is, then the translated content. I'll write it directly. CVE-2023-48842 Fonte : D-Link Go-RT-AC750 revAv101b03 è stato scoperto contenere una vulnerabilità di command injection tramite il parametro service in hedwig.cgi...

CVE-2025-55184_Testing

CVE-2025-55184Testing Script Python para testar CVE-2025-55184 CVE-2025-55184 – Scanner de DoS para React Server Components Um script seguro de validação de segurança projetado para detectar CVE-2025-55184 , uma vulnerabilidade de negação de serviço DoS que afeta React Server Components RSC. Esta...

EUVD-2026-67587

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...

CVE-2026-82261 SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...

CVE-2026-82261

SvelteKit (@sveltejs/kit) versions >=2.49.0 and

EUVD-2026-67586

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...

CVE-2026-82260

SvelteKit (@sveltejs/kit) versions 2.49.0 through 2.52.1 with the experimental remoteFunctions and form features enabled are vulnerable to memory exhaustion in remote form deserialization. Malformed form data triggers excessive memory allocation, crashing the server process and causing a denial o...

CVE-2026-82259 SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

EUVD-2026-67585

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82259

SvelteKit versions 2.49.0 through 2.53.2 (fixed in 2.53.3 ) are affected by a deserialization expansion vulnerability in the experimental form remote function . When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files....

EUVD-2026-67582

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82256 SvelteKit before 2.69.1 Denial of Service via Remote Form

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82256

SvelteKit versions prior to 2.69.1 contain a denial-of-service vulnerability in its remote form function handling. The root cause is a failure to properly validate payload sizes, allowing an unauthenticated network attacker to crash the Node process by sending abnormally large payloads. Repeated ...

EUVD-2026-67706

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

CVE-2026-82254

gitoxide before 0.69.0 is vulnerable to denial of service via its gix-pack component. The root cause is unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers . An attacker can send crafted pack data during clone or fetch operations to trigger ...

CVE-2026-82254 gitoxide before 0.69.0 Denial of Service via gix-pack

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

CVE-2026-82250

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation triggered when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to cause an index out of bounds panic , aborting the client p...