6191 matches found
GHSA-PCG2-G6CJ-Q92C Tornado: Quadratic CPU usage when parsing HTTP headers with line folding
Summary Tornado's HTTP header parser takes quadratic time On² when a header value is continued across many "obsolete line folding" obs-fold lines. An unauthenticated attacker can send a request whose header block is mostly short continuation lines. Parsing it uses a large amount of CPU on the...
EUVD-2026-110318
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding...
GHSA-542M-9234-8GVF vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
Summary vLLM renders chat templates by passing the resolved Jinja2 source to tokenizer.applychattemplate, which compiles and .renders it in an ImmutableSandboxedEnvironment. The sandbox prevents code-execution escapes but imposes no wall-clock timeout, no output-size cap, and no nested-loop or...
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
Summary vLLM renders chat templates by passing the resolved Jinja2 source to tokenizer.applychattemplate, which compiles and .renders it in an ImmutableSandboxedEnvironment. The sandbox prevents code-execution escapes but imposes no wall-clock timeout, no output-size cap, and no nested-loop or...
Allocation of Resources Without Limits or Throttling
Overview @a2ui/webcore is an A2UI Core Library Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parse method of the ExpressionParser class. An attacker can block the main thread of the client, on every re-resolution when the bound dat...
FasterXML Jackson-DataFormat-Smile resource management error vulnerability
A resource management error vulnerability exists in FasterXML Jackson-DataFormat-Smile versions from 2.9.0 up to 2.18.12, from 2.19.0 up to 2.21.8, from 2.22.0 up to 2.22.4, from 3.0.0 up to 3.1.8, and from 3.2.0 up to 3.2.4. This vulnerability stems from the NonBlockingByteArrayParser asynchrono...
PT-2026-129188
Name of the Vulnerable Software and Affected Versions langgraph-sdk versions 0.4.0 through 0.4.5 langgraph versions 1.2.3 through 1.2.13 Description The LangGraph Python SDK v3 streaming client fails to encode caller-supplied thread id and assistant id values when interpolating them into request...
eBook-BypassingAVsByCSharp
eBook "Bypassing AVS by C.NET Programming" Free Chapters only Author: Damon Mohammadbagher I want to share Chapters for my eBook before Publish it so i will share these , "chapter by chapter" via simple PDF/Code/Video files. Chapters : Chapter 1 : Creating Simple Backdoor Payload by C.NET Chapter...
Linux kernel DoS
The vulnerability in the unixreleasesock function within the net/unix/afunix.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-116577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly...
Linux Kernel DoS
The vulnerability in the kernel component arch/x86/boot/earlyserialconsole.c of the Linux operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
CVE-2026-116577
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...
DEBIAN-CVE-2026-116577
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...
CVE-2026-112595
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network...
CVE-2026-112595
A security vulnerability exists in Apple products, including iOS , iPadOS , macOS , and tvOS , where inadequate authentication mechanisms could allow an attacker in physical proximity to craft malicious network traffic to gain access to a Thread network . This issue is addressed by improved authe...
CVE-2026-112595
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network...
EUVD-2026-110281
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network...
CVE-2026-116577
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a head...
Thread Pool Injection Evasion
Decrypt shellcode and queue it as a TpAllocWait/TpSetWait thread-pool callback no CreateThread on the payload path. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import buildencryptedzigbackdoor, optionvalue from lib.compile.threadpoolinjection...
PT-2026-125125
Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.6 Description The HTTP header parser in this Python web framework and asynchronous networking library accepts obsolete line folding. An unauthenticated client can submit a header block with numerous short continuati...