CVE-2026-100648

A flaw was found in vllm. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by bypassing file size restrictions during multimodal chat audio processing. By submitting requests with oversized audio files, an attacker can force the server to allocate...

CVE-2026-100647 vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cachesalt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum length validation and is processed on the single EngineCore scheduler thread. Unauthenticated attackers can send HTTP...

DHEater

DHEater DHEater は DHEat 攻撃（CVE-2002-20001）の概念実証実装です。TLS と SSH の両方で Diffie-Hellman ephemeral（DHE）または楕円曲線 Diffie-Hellman ephemeral（ECDHE）鍵交換を強制することで、サーバーの CPU を飽和させます。攻撃の詳細についてはプロジェクトページを参照するか、IEEE Access に掲載されている完全な技術論文をお読みください。 免責事項 DHEater は、防御目的の...

phpstress

phpstress Night Lion Security による、Apache および NGINX システム（PHP-FPM および PHP-CGI）で動作する PHP ウェブサイト向けの、概念実証（proof of concept）のサービス妨害 / ストレステスターです。 標準的なケーブル/DSL 接続を使用して、この攻撃は標準的な HTTP リクエストを用いて Linux Web サーバーの CPU と RAM を圧迫（フラッディング）させることができます。この攻撃は、PHP-CGI または PHP-FPM（WordPress サイトを含む）を使用して動的 PHP...

CVE-2026-67419

RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive segments in a binding key to make both topic matchers revisit the same trie-node and routing-key-suffix states without memoization. Th...

golang-CVE-2023-44487

Golang CVE-2023-44487 테스트 이 저장소는 CVE-2023-44487에 대한 테스트 리소스와 결과를 포함합니다. https://github.com/secengjeff/rapidresetclient의 수정된 버전을 사용하여 다양한 Golang 서버 구성에 대해 테스트합니다. 일반 서버 대상 테스트 root@kitploit: go run server.go go run attacker.go -requests 500000 결과 go 1.21.0 root@kitploit: 350% CPU load --- Summary...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU 枯渇脆弱性 PoC このリポジトリには、CONTINUATIONフレームのフラッドによって引き起こされるEnvoyのCPU枯渇脆弱性を実証するための概念実証（PoC）Pythonスクリプトが含まれています。著者: blackmagic 2024 説明...

CVE-2026-53493

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

EUVD-2026-86477

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87721

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87721 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87721

Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g ). An unauthenticated remote attacker can trigger a persistent deni...

io.netty/netty-codec-xml: Netty: Denial of Service via CPU Exhaustion in XmlFrameDecoder

A flaw was found in Netty's XmlFrameDecoder component. An unauthenticated remote attacker could send specially crafted XML closing-tag sequences. This could cause the system to repeatedly rescan accumulated data, leading to high CPU utilization and a denial of service DoS...

CVE-2026-61816

The zbateson/mail-mime-parser library is vulnerable to an uncontrolled resource consumption (CWE-400) vulnerability in versions 2.0.0 and prior to 3.0.6 and 4.0.2. Due to three independent parsing paths being super-linear in cost , a crafted email under 2 MB can consume significant CPU time or co...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS React Flight プロトコルを介した認証不要のリモートサービス妨害（DoS） サーバーコンポーネントの Map 逆シリアル化における二次関数的 CPU 消費 概要 • 仕組み • ツール • インストール • 使用方法 • Nuclei • 対策 • 免責事項 脆弱性の概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-23869 別名| React2DoS CVSS スコア| 7.5（高） CVSS ベクター| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...

Linux Distros Unpatched Vulnerability : CVE-2026-77399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fromical accepts an attacker-controlled...

Linux Distros Unpatched Vulnerability : CVE-2026-66074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, matchvalue/3 passes the user-supplied ?name= regular...

elysia has Inefficient Algorithmic Complexity and Interpretation Conflict

Elysia v1.4.28 is vulnerable to denial-of-service attacks due to CPU exhaustion in the form data normalization code. Elysia uses getAll to retrieve value from FormData. It is called directly relative to the total number of key-value pairs in the form data. The total amount of work the for loop ha...

Jawn: Quadratic parsing effort in AsyncParser

AsyncParser can be forced to perform On^2 work on the length of the input. When a single JSON token arrives across many small chunks, each absorb call rescans the incomplete token from the start. Impact Denial of service via CPU exhaustion when parsing untrusted JSON. Preconditions: - Application...

CVE-2026-66074

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, matchvalue/3 passes the user-supplied ?name= regular expression to re:run with no matchlimit option, and executes it once per resource in the result set. OTP's default 10M matchlimit caps ea...