CVE-2017-7472

CVE-2017-7472 El subsistema KEYS en el kernel de Linux anterior a 4.10.13 permite a usuarios locales causar una denegación de servicio consumo de memoria mediante una serie de llamadas KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring. Acceso directo Vulnerable kernel 4.10.13...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

axios-redos

Ataque de Denegación de Servicio por Expresión Regular en Axios Este repositorio contiene un POC de CVE-2021-3749. Resumen Se encontró una falla de ReDoS denegación de servicio por expresión regular en el paquete axios. Un atacante que pueda proporcionar una entrada manipulada a la función trim...

CVE-2021-35492

Información del Exploit Título del Exploit: Wowza Streaming Engine 4.8.11+5 - Denegación de Servicio CVE: CVE-2021-35492 Fecha: 2021-10-06 Autor del Exploit: N4nj0 Enlace del Software: https://www.wowza.com/products/streaming-engine Versión: 4.8.11+5 Probado en: Wowza Streaming Engine = 4.8.11+5...

Security Bulletin: Due to the use of HTTP/2 requests to a Jetty server, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-12611)

Summary HTTP/2 requests with Jetty server is used by IBM Sterling Control Center as part of dependency in jetty-http2-common-12.0.25.jar. Vulnerability Details CVEID:CVE-2026-12611 DESCRIPTION: A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never...

Security Bulletin: Due to the use of jackson-databind, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-68497)

Summary Jackson-databind is used by IBM Sterling Control Center as part of dependency in jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by...

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...

Linux Distros Unpatched Vulnerability : CVE-2026-103880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP...

CVE-2026-103885

A flaw was found in Apache Directory LDAP API. This vulnerability allows an attacker to cause a Denial of Service DoS by submitting specially crafted telephone numbers to an LDAP Lightweight Directory Access Protocol server using the library. Processing these malformed inputs causes indefinite CP...

Security Bulletin: Vulnerability in pyasn1 bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the pyasn1 library, which is affected by a denial of service vulnerability. CVE-2026-59884, CVE-2026-59885, CVE-2026-59886. Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER...

CVE-2026-94657

A flaw was found in Apache Thrift. A remote attacker could exploit improper resource allocation controls in the JavaME bindings to cause a Denial of Service DoS. By sending requests that trigger unbounded resource consumption, an attacker can exhaust system resources and make the service...

CVE-2026-104436

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

RUSTSEC-2026-0321 WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-j366-h8gg-77pm For more information see the GitHub-hosted security advisory...

WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-j366-h8gg-77pm For more information see the GitHub-hosted security advisory...

CVE-2026-104436 Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

CVE-2026-104436

Zebra versions before 4.5.0 are susceptible to an uncontrolled resource consumption vulnerability. Remote P2P peers can exhaust blocking-pool threads by transmitting oversized block locator vectors, specifically by sending getblocks or getheaders messages containing up to 65,535 locator hashes . ...

EUVD-2026-91446

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

EUVD-2026-91434

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423

The Zebra (zebrad) software, specifically versions before 6.2.1 , is susceptible to an asymmetric resource consumption vulnerability (CWE-405). This flaw allows unauthenticated peers to stall block verification by flooding the shared unprioritized Halo2 verification queue with zero-fee transactio...

Improper Handling of Length Parameter Inconsistency

Overview apache/thrift is an Apache Thrift RPC system Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via improper message handling in language bindings. An attacker can cause application crashes or excessive resource consumption by sending...