CVE-2026-26903-PoC

CVE-2026-26903 PoC TanStack Query의replaceEqualDeep 함수의 무제한 재귀로 인한 서비스 거부Denial-of-service 깊게 중첩된 객체가 포함된 단일 조작된 쿼리 업데이트는 JavaScript 스레드를 무기한 정지 시켜 애플리케이션 전체가 응답하지 않게 만들 수 있습니다. 인증이나 특별한 권한은 필요하지 않습니다. 영향을 받는 버전 이 취약점은 2026년 1월 14일에 게시된 PR 10032을 통해 @tanstack/[email protected]에서 수정되었습니다. 패키지|...

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

Summary A Denial of Service DoS vulnerability exists in the AMQP client's connection negotiation logic. The AMQP specification explicitly mandates a strict minimum frame size of 4096 bytes to prevent pathological packet fragmentation. While the library defines a frameMinSize = 4096 constant, the...

GHSA-XWWF-M8FG-P9Q2 RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

Summary A Denial of Service DoS vulnerability exists in the AMQP client's connection negotiation logic. The AMQP specification explicitly mandates a strict minimum frame size of 4096 bytes to prevent pathological packet fragmentation. While the library defines a frameMinSize = 4096 constant, the...

PT-2026-37199

Name of the Vulnerable Software and Affected Versions Pillow versions 4.2.0 through 12.1.x Description A flaw in the PdfParser allows an attacker to supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This occurs because...

CVE-2026-26278

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, the XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it’s possible ...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the indexadd function. An attacker can cause the application to crash or become unresponsive by submitting specially crafted input. Remediation There is no fixed version for oneflow. References -...

EUVD-2006-4007

Malware in sbrugna...

CVE-2020-1901

Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message...

CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...

Microsoft Windows OpenType Font Analysis Vulnerability (CNVD-2016-01569)

Microsoft Windows is a series of operating systems released by Microsoft.Adobe Type Manager Library is one of the font driver libraries. A security vulnerability exists in the Windows Adobe Type Manager Library for Microsoft Windows, which arises from a failure of the program to properly handle...

Microsoft DirectX 89 DirectPlay - Multiple Denial of Service Vulnerabilities

Microsoft DirectX 89 DirectPlay - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41794/info Microsoft DirectX is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to interrupt existing sessions or crash or freeze the...

W3Filer 2.1.3 Remote Stack Overflow PoC

No description provided by source. / W3Filer Buffer Overflow Vulnerability DoS POC r0ut3r writ3r at gmail.com Version: 2.1.3 Description: If the client recieves a large banner when attempting to send a file the application will freeze, resulting in the user having to kill the application...

CVE-2006-4014

CVE-2006-4014 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is allowed to connect from any machine, remote attackers can trigger a denial of service (application freeze) by sending invalid posts. The public details specify the vulnerability class and affected...