Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the processing of malicious JSON payloads in the request handling process. An attacker can exhaust system memory and CPU resources by sending specially crafted JSON objects that, when deserialized, consume...

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

Vfront 安全漏洞

Vfront is a database management front-end tool by Marcello Verona Personal Developer. A security vulnerability exists in Vfront version 0.99.52, which stems from a failure to validate or use the allowedclasses option when performing deserialization operations on user-controlled input, which could...

Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks

Large language models LLMs are increasingly vulnerable to multi-turn jailbreak attacks, where adversaries iteratively elicit harmful behaviors that bypass single-turn safety filters. Existing defenses predominantly rely on passive rejection, which either fails against adaptive attackers or overly...

dotnet: .NET Denial of Service Vulnerability

A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operatio...

CVE-2025-58474

CVE-2025-58474 affects BIG-IP BIG-IP Advanced WAF/ASM and NGINX App Protect DNS lookup vulnerability. When BIG-IP Advanced WAF is on a virtual server with SSRF protection or NGINX App Protect Bot Defense is used, undisclosed requests can disrupt new client requests, enabling potential DoS on the ...

The vulnerability of the libexpat XML file analysis library, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the libexpat library for analyzing XML files is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

F5 BIG-IP 资源管理错误漏洞

5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the TMM module of the BIG-IP system, which arises because undisclosed traffic could...

PT-2025-42325

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.5.1.3 F5 BIG-IP versions prior to 17.1.3 F5 BIG-IP versions prior to 16.1.6.1 F5 BIG-IP versions prior to 15.1.10.8 Description An unauthenticated Remote Code Execution RCE exists in the F5 BIG-IP Access Policy...

Improper Handling of Syntactically Invalid Structure

Overview Affected versions of this package are vulnerable to Improper Handling of Syntactically Invalid Structure via the handling of BitArray objects with mismatched Elems and Bits values. An attacker can cause network disruption or halt by sending specially crafted messages containing invalid...

Improper Handling of Syntactically Invalid Structure

Overview github.com/cometbft/cometbft/consensus is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Affected versions of this package are vulnerable to Improper Handling of...

Astra Linux - уязвимость в openvswitch

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-7328

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...

The vulnerability of the IPMacBindModify() function in the Tenda G3 wireless access point’s software allows a hacker to cause a service failure.

The vulnerability of the IPMacBindModify function in the Tenda G3 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted POST requests...

The vulnerability of the getsinglepppuser() function in the Tenda G3 wireless access point software allows a intruder to trigger a service failure.

The vulnerability of the getsinglepppuser function in the Tenda G3 wireless access point’s microprogramming system is related to buffer overflows due to the processing of the pPppUser parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending speciall...

The vulnerability of the formModifyPppAuthWhiteMac() function in the Tenda G3 wireless access point software allows a hacker to trigger a service failure.

The vulnerability of the formModifyPppAuthWhiteMac function in the Tenda G3 wireless access point software is related to buffer overflows when processing the pppoeServerWhiteMacIndex parameter. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending...

The vulnerability of the dev_set_name() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the devsetname function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qj_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the qjasp function in D-Link DI-8100 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the chameleon_parse_gdd() function in the drivers/mcb/mcb-parse.c file of the Linux kernel allows a hacker to access protected information or cause service failures.

The vulnerability of the chameleonparsegdd function in the drivers/mcb/mcb-parse.c file of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...