CVE-2026-102408

Elasticsearch is vulnerable to a Denial of Service via Inefficient Regular Expression Complexity (CWE-1333) within the ES|QL CHUNK function 's recursive chunking strategy. The root cause is the lack of validation for computational complexity or execution time bounds on user-supplied regular expre...

CVE-2026-102404

A low-privileged authenticated user can trigger a Denial of Service (DoS) in Elasticsearch by submitting a specially crafted query. The vulnerability, classified as CWE-400 (Uncontrolled Resource Consumption) and CAPEC-130 (Excessive Allocation), causes uncontrolled memory growth in the query pro...

EUVD-2026-93926

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memor...

onionjuggler

OnionJuggler Gestor de servicios onion con muchas funciones para sistemas operativos tipo UNIX, escrito en shellscript compatible con POSIX OnionJuggler es una colección portátil de scripts y documentación de requisitos mínimos para ayudar al operador del servicio a hacer malabares gestionar sus...

CVE-2026-96399

The Gitea platform is vulnerable to a denial of service attack caused by a runtime panic. The root cause is that a repository's external issue tracker regular expression containing alternating capture groups can produce invalid slice indexes during the rendering of issue references. An attacker w...

CVE-2018-1000199

CVE-2018-1000199 El código de ptrace en Linux virtualiza el acceso a los registros de depuración, y el código de virtualización tiene un manejo de errores incorrecto. Esto significa que si escribes un valor ilegal en, por ejemplo, DR0, el estado interno del seguimiento de puntos de interrupción d...

CVE-2026-96890

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...

CVE-2026-83550

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2026-106121

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners d...

CVE-2026-104945

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

CVE-2026-79812

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager . An authenticated local attacker can exploit this flaw to interrupt the normal operation of the agent service. No specific root cause, version details, or remediation steps are provided in th...

CVE-2023-27163-POC

CVE-2023-27163 Poc of SSRF for Request-Baskets CVE-2023-27163 based on this code from entr0pie. The PoC is expanded to fuzz the content of another web service local or otherwise and return the content of the files found. Usage python3 CVE-2023-27163.py http://: -t http://: -w...

CVE-2024-49113

LDAP Nightmare An exploit for CVE-2024-49113 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

EUVD-2026-93874

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...

CVE-2026-76747 Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...

CVE-2026-76747

Buffer overflow vulnerabilities exist in the affected interface of AOS-S . An unauthenticated remote attacker can successfully exploit these flaws to expose sensitive memory contents and cause a denial of service (DoS) on the device. No specific exploit code or remediation details are provided in...

CVE-2026-76746 Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

CVE-2026-76746

A critical buffer overflow vulnerability exists in AOS-S . This flaw allows an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service (DoS) on the affected device. While the CVSS score reflects high impact, the documents do not provide specific details...

EUVD-2026-93980

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

CVE-2026-76741

AOS-S is subject to buffer overflow vulnerabilities within its affected interface. If successfully exploited by an authenticated remote attacker , these vulnerabilities can lead to a denial-of-service (DoS) condition on the affected system. No specific software versions, root causes, or remediati...