CVE-2024-38355-PoC

CVE-2024-38355 Demo Socket.IO Crash This project is a Proof of Concept demonstrating CVE-2024-38355 , a denial-of-service vulnerability in socket.io. The project was created for educational purposes to show the attack mechanism and how to protect applications. About the Vulnerability CVE-2024-383...

CVE-2026-87123

hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, resolves to an object whose toHTML property is truthy but not callable. Handlebars escapeExpression calls the toHTML...

multiparty-CVE-2026-8161

CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...

CVE-2023-54355 PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exceptio...

Kibana 9.1.7 < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-115)

The version of Kibana installed on the remote host is 9.1.7 or later prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-115 advisory. - Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulatio...

EUVD-2026-67930

multer vulnerable to Denial of Service via crafted multipart field names...

CVE-2026-69839

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

EUVD-2026-73060

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

CVE-2026-69839

CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...

Windows iSCSI Target Service Denial of Service Vulnerability

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

CVE-2022-51010

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

CVE-2022-51010 PocketMine-MP before 4.4.2 Server Crash via Item ID

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

CVE-2022-51010

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data . An attacker with a low-privilege client can send a crafted item ID outside the valid range, triggering an uncaught exception that crashes the server, resulting in a high availabili...

CVE-2026-72644

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

CVE-2026-72644

CVE-2026-72644 is a denial-of-service vulnerability in Kibana (Elastic). An authenticated user with only low-privileged access to the Observability AI Assistant can submit a specially crafted request that triggers an uncaught exception (CWE-248), terminating the Kibana process and denying service...

EUVD-2026-69563

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...