71 matches found
CVE-2026-65654: Allocation of Resources Without Limits or Throttling
github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local node's labels, but affected versions do not apply those limits to label maps received in SWIM membership changes. A network peer that can reach a live Ringpop TChannel listener can...
CVE-2023-54394: Allocation of Resources Without Limits or Throttling
PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attackers to trigger excessive inventory synchronization. Attackers can send numerous mismatch transactions to force the server to transmit large amounts of serialized inventory data...
CVE-2022-51018: Uncontrolled Resource Consumption
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create oversized NBT 'book bombs', causing excess bandwidth consumption and server crashes exceeding the 1 MB chunk size limit when...
EUVD-2015-3012
Malware in sbrugna...
EUVD-2010-1869
Malware in sbrugna...
EUVD-2007-0536
Malware in sbrugna...
EUVD-2013-1174
Malware in sbrugna...
EUVD-2007-4388
Malware in sbrugna...
EUVD-2010-0323
Malware in sbrugna...
EUVD-2005-3672
Malware in sbrugna...
EUVD-2021-7919
Malicious code in bioql PyPI...
CVE-2010-0292
The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...
RHEL 5 : busybox (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - busybox: heap-based buffer overflow in OPTION6RD parsing CVE-2016-2148 - Integer overflow in the DHCP...
Ubuntu 23.04 / 23.10 : Puma vulnerability (USN-6597-1)
The remote Ubuntu 23.04 / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6597-1 advisory. It was discovered that Puma incorrectly handled parsing chunked transfer encoding bodies. A remote attacker could possibly use this issue to cause Puma to...
SUSE CVE-2015-2927
node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service bandwidth consumption...
CVE-2021-20501: Undefined Security Weakness
IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remot...
New Research Reveals the Hidden Downsides of Link Previews
The feature is convenient, but it can also leak sensitive data, consume bandwidth, and drain batteries. And some sites are worse than others...
Design/Logic Flaw
node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service bandwidth consumption...
CVE-2015-2927
node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service bandwidth consumption...
CVE-2015-2927
CVE-2015-2927 : Affected components are node 0.3.2 and URONode prior to 1.0.5r3. The vulnerability allows remote attackers to cause a denial of service via bandwidth consumption. This is documented across multiple sources (NVD, SUSE, CNVD, CVE lists) with consistent description; exploitation deta...