CVE-2026-125332

A flaw was found in node-forge. A malicious server or an on-path attacker can cause a Denial of Service DoS by providing an unsupported compression method during the Transport Layer Security TLS handshake. Because the client fails to validate the compression method before processing it, an...

CVE-2026-17426

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

CVE-2026-17426 This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

CVE-2026-17426

IBM Power Systems running OPENBMC firmware versions FW1060.00 through FW1060.81 are vulnerable to a denial of service (DoS) via an unhandled exception (CWE-248). This flaw allows a remote, unauthenticated attacker to crash the BMC's HTTPS service . Affected products include various IBM Power Syst...

EUVD-2026-119744

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

CVE-2026-17426 This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

PT-2026-140152

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception...

CVE-2025-70886

CVE-2025-70886 A Proof of Concept PoC exploit for CVE-2025-70886, a persistent denial-of-service vulnerability in Halo CMS v2.22.4 and earlier that allows remote attackers to crash the admin comment interface by submitting malformed payloads. Basic Information Product Vendor: 凌霞软件 Vendor Website:...

CVE-2026-120222 undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handler that throws during response processing such as the built-in dump interceptor exceeding its maxSize, or the decompress interceptor...

CVE-2026-107382

A flaw was found in MariaDB Connector/Node.js. When establishing a secure Transport Layer Security TLS connection without a configured certificate authority and using Ed25519 authentication, the client attempts to access an out-of-scope variable during certificate fingerprint validation. A...

CVE-2026-76892

A flaw was found in @tsparticles/mcp-server. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a malformed JSON request to the HTTP server endpoint. Because the application fails to catch parsing errors when handling incoming requests, the invalid payload causes an...

CVE-2026-85315

A flaw was found in the Apache Camel gRPC component. When an internal route processing a gRPC remote procedure call request fails, the application includes the unhandled exception message directly in the status description returned to the client. A remote attacker able to trigger a route failure...

CVE-2026-85246

A flaw was found in the Apache Camel Mina component. When message processing fails, the Mina consumer directly returns the unhandled exception across the network connection to the client. A remote attacker can exploit this vulnerability by triggering a processing failure to obtain sensitive...

CVE-2025-48997

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service DoS by sending an upload file request with an empty string field name. This request causes ...

CVE-2026-119052

A flaw was found in llama.cpp. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted request with an excessively large message length to the Remote Procedure Call RPC server. Handling this malformed input triggers an unhandled exception, crashing the...

Undici Vulnerable To Denial Of Service Via Unhandled Exception In The Decompress Interceptor

Impact undici's "decompress" interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw. undici's engine converts a synchronous throw from a downstream handler into a per-request failure, but tha...

Server-side Request Forgery (SSRF)

Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the validatetoolresult function in src/mcp/client/session.py, where $ref references in a tool's output schema are resolved against external registries rather than...

qs: qs: Denial of Service via unhandled exception during array serialization

A flaw was found in qs. A remote attacker could cause a Denial of Service DoS by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled...

qs: qs: Denial of Service via unhandled exception during array serialization

A flaw was found in qs. A remote attacker could cause a Denial of Service DoS by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled...

qs: qs: Denial of Service via unhandled exception during array serialization

A flaw was found in qs. A remote attacker could cause a Denial of Service DoS by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled...