PT-2026-37199

Name of the Vulnerable Software and Affected Versions Pillow versions 4.2.0 through 12.1.x Description A flaw in the PdfParser allows an attacker to supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This occurs because...

CVE-2026-26278

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, the XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it’s possible ...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the indexadd function. An attacker can cause the application to crash or become unresponsive by submitting specially crafted input. Remediation There is no fixed version for oneflow. References -...

EUVD-2006-4007

Malware in sbrugna...

CVE-2020-1901

Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message...

CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...

Microsoft Windows OpenType Font Analysis Vulnerability (CNVD-2016-01569)

Microsoft Windows is a series of operating systems released by Microsoft.Adobe Type Manager Library is one of the font driver libraries. A security vulnerability exists in the Windows Adobe Type Manager Library for Microsoft Windows, which arises from a failure of the program to properly handle...

Microsoft DirectX 89 DirectPlay - Multiple Denial of Service Vulnerabilities

Microsoft DirectX 89 DirectPlay - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41794/info Microsoft DirectX is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to interrupt existing sessions or crash or freeze the...

W3Filer 2.1.3 Remote Stack Overflow PoC

No description provided by source. / W3Filer Buffer Overflow Vulnerability DoS POC r0ut3r writ3r at gmail.com Version: 2.1.3 Description: If the client recieves a large banner when attempting to send a file the application will freeze, resulting in the user having to kill the application...

CVE-2006-4014

CVE-2006-4014 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is allowed to connect from any machine, remote attackers can trigger a denial of service (application freeze) by sending invalid posts. The public details specify the vulnerability class and affected...