CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

padding-oracle-attacker

padding-oracle-attacker CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI. Install Make sure Node.js is installed, then run $ npm install --global padding-oracle-attacker or $ yarn global add padding-oracle-attacker CLI...

php-app-race-condition

Vulnerable PHP App Race Condition Environment setup: docker-compose up Environment verification: Connection Test: http://localhost/test.php Vulnerable endpoint: http://localhost/poc.php Race condition exploit: echo http://localhost | nuclei -t race.yml Observe that less than 1280$ were accounted...

strutser

strutser This program checks for CVE-2017-5638. Usage Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP requests. default ...

CVE-2026-126936 Zipline before 4.7.0 Race Condition in Invite and Quota Limits

Zipline before 4.7.0 contains a race condition vulnerability that allows users to bypass invitation usage limits, upload storage quotas, and shortened-URL quotas through concurrent requests. Attackers can send overlapping registration, upload, or URL creation requests that pass checks against sta...

CVE-2026-126936

Zipline versions before 4.7.0 are vulnerable to a race condition (CWE-367) that allows users to bypass various resource limitations. By sending concurrent, overlapping requests for registration, uploads, or URL creation, an attacker can exploit stale state checks to bypass invitation usage limits...

pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests

Impact Documents belonging to one caller could be returned to another. Where an application passes a customer or tenant identifier as a search filter, that scoping could be defeated by ordinary concurrent traffic. No injection and no malformed input are required — normal load is enough. The BM25...

GHSA-W437-9MWM-J6VQ pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests

Impact Documents belonging to one caller could be returned to another. Where an application passes a customer or tenant identifier as a search filter, that scoping could be defeated by ordinary concurrent traffic. No injection and no malformed input are required — normal load is enough. The BM25...

EUVD-2026-121707

pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests...

CVE-2024-53476

CVE-2024-53476 Description SimplCommerce is affected by a race condition vulnerability in the checkout logic, allowing multiple users to purchase more products than are in stock via simultaneous checkout requests. Detection Method An attacker can detect this vulnerability by attempting to purchas...

EUVD-2026-124052

Paaster is a pastebin application. Prior to version 3.3.0, Paaster's "view once" burn-after-reading paste mode can be bypassed with concurrent requests. The check that's supposed to enforce single-use is a plain read followed by a separate write, with no atomicity, so multiple simultaneous reques...

Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Impact ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent request destroys the session, through resetsession on logout or by deleting its cache entry on t...

CVE-2026-125325 pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests

pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index is a single per-pipeline object shared by the unauthenticated query endpoint, and concurrent requests lock its clear, refill, and search operations...

CVE-2026-125325 pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests

pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index is a single per-pipeline object shared by the unauthenticated query endpoint, and concurrent requests lock its clear, refill, and search operations...

PT-2026-144092

Name of the Vulnerable Software and Affected Versions pgEdge RAG Server versions prior to 2.0.0 Description An issue exists in the BM25 keyword index, which is a single per-pipeline object shared by the unauthenticated query endpoint. Because concurrent requests lock the clear, refill, and search...

EUVD-2026-119831

The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing unauthenticated users to create overlapping confirmed bookings for the same team member across different bookable items by sending simultaneous requests...

@better-auth/drizzle-adapter: Concurrent Requests Can Exceed Rate Limits On PostgreSQL

Am I affected? You are affected if you use "@better-auth/drizzle-adapter" from 1.6.17 through versions before 1.7.7 including the 1.7.0 prereleases from beta.6 through rc.6 or "@better-auth/kysely-adapter" 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these...

GHSA-44JH-23M7-HPCF @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

Am I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 including the 1.7.0 prereleases from beta.6 through rc.6 or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must ...

@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

Am I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 including the 1.7.0 prereleases from beta.6 through rc.6 or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must ...