EUVD-2024-34272

Malicious code in bioql PyPI...

EUVD-2023-24304

Malicious code in bioql PyPI...

EUVD-2024-48091

Malicious code in bioql PyPI...

EUVD-2023-38254

Malicious code in bioql PyPI...

EUVD-2023-44145

Malicious code in bioql PyPI...

Unverified Paths can Cause Excessive Use of System Resources

...

Unverified File Handles can Cause Excessive Use of System Resources

...

CVE-2025-27721

Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources...

CVE-2025-27721

CVE-2025-27721 affects INFINITT PACS System Manager. The vulnerability allows unauthorized users to access the system, potentially enabling unauthorized access to resources. Technical detail from connected sources indicates an endpoint that accepts file uploads could lead to remote code execution...

INFINITT PACS System Manager 安全漏洞

INFINITT PACS System Manager is a medical image archiving and transfer system from INFINITT Corporation. A security vulnerability exists in INFINITT PACS System Manager that originates from unauthorized access and could result in system resources being accessed...

Linux Distros Unpatched Vulnerability : CVE-2021-4235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be...

PT-2025-30743

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7 Description Kron PAM is susceptible to a denial-of-service DoS attack due to unrestricted resource allocation. This allows an attacker to exhaust system resources via HTTP requests. Recommendations Update Kron PA...

CVE-2025-41676

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41676

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

PT-2025-30253 · Fast · Fast

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41677 Description: A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession. Recommendations: At the moment, there ...

PT-2025-30252 · Sendsms · Sendsms

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-41676 Description: A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession. Recommendations: At the moment, there i...

PT-2025-30258 · Apache +1 · Apache Jena +1

Name of the Vulnerable Software and Affected Versions: Apache Jena versions up to 5.4.0 Description: The application does not validate file access paths within configuration files uploaded by users possessing administrator privileges. This could allow for unauthorized access or manipulation of...

Denial Of Service (DoS)

com.nimbusds:nimbus-jose-jwt is vulnerable to Denial Of Service DoS. The vulnerability is due to uncontrolled recursion due to lack of validation on JSON object nesting depth in JWT claim sets, allowing remote attackers to exhaust system resources with deeply nested structures...