CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 高度なエクスプロイトツール プロフェッショナル向け React Server Components DoS エクスプロイトフレームワーク "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 クイックスタート • 📖 ドキュメント • 💻 機能 • ⚠️ 免責事項 🎯 CVE-2025-55184 について CVE-2025-55184 は、React Server Components RSC 実装に影響を及ぼす高深刻度のサービス拒否 DoS 脆弱性...

CVE-2026-24688

CVE-2026-24688 - pypdf - 순환 참조 DoS 취약점 이 저장소에는 CVE-2026-24688을 트리거하기 위한 개념 증명 코드가 포함되어 있습니다. 요약 pypdf의 개요북마크 파싱 로직에서 발생하는 심각한 서비스 거부DoS 취약점입니다. 순환 개요 참조가 포함된 PDF를 처리할 때 파서가 무한 루프에 빠져 메모리를 지속적으로 할당하며, 제 시스템TM 기준 초당 수백 MB의 메모리를 소비하여 결국 전체 시스템이 충돌합니다. 이는 애플리케이션 중단이 아닌 시스템 수준의 DoS입니다. 내용물...

CVE-2026-74381

A flaw was found in the gpu: host1x component of the Linux kernel. When a buffer object is pinned with a cache, a circular reference prevents the buffer object from being freed. This issue can lead to a resource leak, potentially allowing a local attacker to cause a Denial of Service DoS by...

CVE-2026-74794

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74787

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...

EUVD-2026-59959

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74794

Scriban before version 6.6.0 contains an infinite recursion vulnerability in object rendering when ObjectRecursionLimit is unlimited. Attacker-supplied circular references in the template context can exhaust stack space, causing an uncatchable StackOverflowException that terminates the hosting pr...

CVE-2026-74787 Scriban before 7.0.0 Uncontrolled Recursion via object.to_json

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...

PT-2026-73161

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

PT-2026-73155

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0 Description An uncontrolled recursion issue exists in the object.to json builtin function due to a lack of depth limits and circular reference detection. An attacker can create templates containing...

UBUNTU-CVE-2026-74484

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the entry is freed. Any entry nobody removes by hand only gets closed once...

UBUNTU-CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...

CVE-2026-74381

The CVE-2026-74381 entry describes a Linux kernel vulnerability in gpu: host1x where entries in BO caches could be freed. A mapping pinned via host1x_bo_pin() with a cache kept a reference to the underlying host1x_bo, preventing theBO from being freed as long as cached. The fix introduces a weak ...

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

Circular JSON Schema $ref causes unbounded CPU DoS in jsonrepair Summary SchemaRepairer.resolveschema in jsonrepair follows JSON Schema $ref pointers in an unbounded while loop without any cycle detection. An attacker who can supply a schema containing a self-referencing $ref e.g., via the demo...

CVE-2026-49451

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a circular schema reference can cause proce...

CVE-2026-41311

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...

CVE-2026-41311

Vulnerability: CVE-2026-41311 affects LiquidJS (Shopify/GitHub Pages compatible template engine). Before 10.25.7, a circular reference in {% layout %} / {% block %} can trigger infinite recursion, exhausting memory (~4 GB) and crashing the Node.js process. Impact: Denial of Service from user-subm...

EUVD-2026-28886

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...

CVE-2026-41311

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...

GHSA-4RC3-7J7W-M548 liquidjs has a Denial of Service via circular block reference in layout

Summary A circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript heap out of memory. This allows any user who can submit a Liquid template to perform a Denial of Service...