CVE-2026-34308

CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...

katana

Katana Un exploit de BootROM para dispositivos Qualcomm lanzados entre 2016 y 2019. Explicación breve del Exploit Con el SoC MSM8998 Nazgul, se agregó el comando 0x13 SAHARARESETSTATEMACHINEID. El comando llamaba a bootsaharaentry, que se supone que reinicia Sahara. La falla es que cada llamada a...

CVE-2021-42697

Akka HTTP 10.1.x 版本（早于 10.1.15）和 10.2.x 版本（早于 10.2.7）在解析 HTTP 头时可能遇到栈耗尽问题，从而允许远程攻击者通过发送带有深层嵌套注释的 User-Agent 头来实施拒绝服务攻击。 参考 MITRE Akka 博客 注释的任意嵌套 Akka 基本设置指南 PoC 说明 测试版本：10.2.4 目标服务器指纹：akka-http/ 负载片段：User-Agent:...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

CVE-2025-46206

Esiste una vulnerabilità di denial of service in MuPDF 1.25.6 e versioni precedenti. Quando un utente malintenzionato esegue il comando "mutool clean poc /dev/null", il programma cade in una ricorsione infinita tra le funzioni stripoutlines e stripoutline in pdf-clean-file.c fino all'esaurimento...

CVE-2026-16781 SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

CVE-2026-40345

deepmerge-ts 8.0.0: DoS durch rekursiven Objektgraphen Ich habe einen Stack-Erschöpfungsfehler in deepmerge-ts-Versionen vor 8.0.0 reproduziert. Das Interessante daran ist, dass der Absturz kein riesiges verschachteltes Objekt benötigt. Er entsteht durch Objektidentität. Wenn beide...

CVE-2026-74663

A flaw was found in the Linux kernel. An attacker could create overly deep queueing discipline qdisc hierarchies, leading to excessive recursion in qdisc tree walkers. This can exhaust the kernel stack, resulting in a Denial of Service DoS due to a system crash...

CVE-2026-74663

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

EUVD-2026-64350

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663

CVE-2026-74663 affects the Linux kernel in the net/sched subsystem. Deep queueing discipline (qdisc) hierarchies can cause excessive recursion in qdisc tree walkers, exhausting the kernel stack and leading to a Denial of Service via system crash. The existing loop check does not cover the create-...

Damn_Vulnerable_C_Program

Nota: o nome do arquivo foi alterado de imgRead.c para dvcp.c; se você estiver assistindo vídeos, verá imgRead.c, mas no repositório do GitHub verá dvcp.c, use o nome de arquivo correto. Damn Vulnerable C ProgramDVCP Meu Canal no YouTube:...

Linux Distros Unpatched Vulnerability : CVE-2026-74663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The...

PT-2026-79668

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...