CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Autor Mohammed Idrees Banyamer 📍 Land: Jordanien 📸 Instagram: @banyamersecurity Proof-of-Concept-Exploit für CVE-2026-26235 – Nicht authentifizierter Denial of Service durch fehlende Authentifizierung im JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Beschreibung der Schwachstelle CVE-2026-26235 ist eine...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS React Flight प्रोटोकॉल के माध्यम से बिना प्रमाणीकरण के रिमोट डिनायल-ऑफ-सर्विस सर्वर कंपोनेंट्स Map डिसीरियलाइज़ेशन में क्वाड्रेटिक CPU थकावट अवलोकन • यह कैसे काम करता है • उपकरण • स्थापना • उपयोग • Nuclei • समाधान • अस्वीकरण भेद्यता अवलोकन फ़ील्ड| विवरण ---|--- CVE ID...

dlink-dir-819-dos

Exploit CVE-2022-40946: Negação de Serviço Não Autenticada em roteadores domésticos DLink DIR 819 A1 Exploit Obter o código-fonte root@kitploit: $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Executar o exploit root@kitploit: ...

PT-2026-82549

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2023-40459

CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit. Diese Sicherheitslücke betrifft die ACEManager-Komponente von ALEOS 4.16 und früher, einem Produkt von Sierra Wireless. Verwendung python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091 Referenz NVD Artikel Double Take Zero D...

CVE-2026-73108

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the payload. A crafted header can request up...

CVE-2026-73108 RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the payload. A crafted header can request up...

PT-2026-82093

Name of the Vulnerable Software and Affected Versions RustDesk versions prior to 1.4.7 Description An uncontrolled speculative memory allocation issue exists in the BytesCodec component. Before authentication, the decoder trusts the payload length specified in a four-byte frame header and reserve...

EUVD-2026-66754

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

CVE-2026-55531

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcppost handler creates a new sessions entry for every initialize request but does not call cleanupsessions or enforce a maximum. An unauthenticated caller can exhaust memory. The fix invokes cleanup and limit...

CVE-2026-55531 PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced)

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcppost handler creates a new sessions entry for every initialize request but does not call cleanupsessions or enforce a maximum. An unauthenticated caller can exhaust memory. The fix invokes cleanup and limit...

cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473: Nicht authentifizierter Denial-of-Service in ZTE-Routern, der weltweit 140.000+ Geräte betrifft 17+ Modelle Technische Aufschlüsselung von CVE-2026-34473, veröffentlicht aus dem ursprünglichen Offenlegungsset und den Firmware-Analyse-Artefakten. Live-Website:...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, allowing an unauthenticated caller to invoke it via DDP or the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail. Because no DDPRateLimiter rule is registered, an attacker can send an unbounded v...

JetBrains TeamCity < 2021.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. CVE-2022-24330 - In JetBrains TeamCity before 2021.2.1, the Agent...

CVE-2026-28318-check

SolarWinds Serv-U DoS non autenticato: Script di rilevamento sicuro Un rilevatore sicuro, non distruttivo per CVE-2026-28318 , un denial-of-service non autenticato in SolarWinds Serv-U= 15.5.4.108. Un singolo POST che trasporta Content-Encoding: deflate e un corpo alimenta quel corpo a un...

Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

Summary An unauthenticated POST to any OpenAPI-validated endpoint, including the anonymous POST /edge/validate and POST /edge/issue-token, crashes the entire Unleash server with one request body of deeply-nested JSON. When request-body validation fails, Unleash builds the error message by calling...

Linux Distros Unpatched Vulnerability : CVE-2026-63495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in...

CVE-2026-64773

CVE-2026-64773 affects Apple container , specifically the host's forwarding process . An unauthenticated network attacker that can reach a container's published TCP port can force the forwarding process to buffer an unbounded amount of client data in memory for as long as the backend container co...

EUVD-2026-63659

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...