1599 matches found
CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-
Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
Impact A single request can crash any application using body-parser with default options. When a request carries a Content-Encoding for example gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one val...
CVE-2026-111181
A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the...
CVE-2026-112332
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...
EUVD-2026-108344
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...
DEBIAN-CVE-2026-111181
body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...
CVE-2026-111181
body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...
CVE-2024-38355-PoC
CVE-2024-38355 Demo Socket.IO Crash This project is a Proof of Concept demonstrating CVE-2024-38355 , a denial-of-service vulnerability in socket.io. The project was created for educational purposes to show the attack mechanism and how to protect applications. About the Vulnerability CVE-2024-383...
Uncaught Exception
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Uncaught Exception via verifyargs in vllm/samplingparams.py, which skips the mintokens = maxtokens validation when maxtokens is null on...
multiparty-CVE-2026-8161
CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...
CVE-2026-96294
A flaw was found in Apache Thrift's Node.js bindings. A remote attacker can exploit improper exception handling by triggering an uncaught exception. This failure causes the application process to crash, leading to a Denial of Service DoS...
CVE-2026-96286
A flaw was found in Apache Thrift. An uncaught exception within the Perl bindings allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted input, an attacker can trigger an unhandled error condition, causing the application to crash unexpectedly...
UBUNTU-CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
Linux Distros Unpatched Vulnerability : CVE-2026-87029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed...
CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
DEBIAN-CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
Uncaught Exception
Overview undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Uncaught Exception in the experimental WebSocket client, where a response failing handshake validation triggers an abort that is a no-op because the request is already...
