9377 matches found
Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks
Large language models LLMs are increasingly vulnerable to multi-turn jailbreak attacks, where adversaries iteratively elicit harmful behaviors that bypass single-turn safety filters. Existing defenses predominantly rely on passive rejection, which either fails against adaptive attackers or overly...
dotnet: .NET Denial of Service Vulnerability
A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operatio...
CVE-2025-58474
CVE-2025-58474 affects BIG-IP BIG-IP Advanced WAF/ASM and NGINX App Protect DNS lookup vulnerability. When BIG-IP Advanced WAF is on a virtual server with SSRF protection or NGINX App Protect Bot Defense is used, undisclosed requests can disrupt new client requests, enabling potential DoS on the ...
PT-2025-42325
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Access Policy Manager versions prior to 15.1.10.8 F5 BIG-IP Access Policy Manager versions prior to 16.1.6.1 F5 BIG-IP Access Policy Manager versions prior to 17.1.3 F5 BIG-IP Access Policy Manager versions prior to 17.5.1.3...
F5 BIG-IP 资源管理错误漏洞
5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the TMM module of the BIG-IP system, which arises because undisclosed traffic could...
libexpat Resource Exhaustion DoS
The vulnerability of the libexpat library for analyzing XML files is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Improper Handling of Syntactically Invalid Structure
Overview Affected versions of this package are vulnerable to Improper Handling of Syntactically Invalid Structure via the handling of BitArray objects with mismatched Elems and Bits values. An attacker can cause network disruption or halt by sending specially crafted messages containing invalid...
Improper Handling of Syntactically Invalid Structure
Overview github.com/cometbft/cometbft/consensus is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Affected versions of this package are vulnerable to Improper Handling of...
Astra Linux - уязвимость в openvswitch
Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
CVE-2025-7328
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...
Linux kernel dev_set_name Heap Buffer Overflow DoS
The vulnerability of the devsetname function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda G3 Wireless Access Point DoS
The vulnerability of the IPMacBindModify function in the Tenda G3 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted POST requests...
Tenda G3 Wireless Access Point DoS
The vulnerability of the getsinglepppuser function in the Tenda G3 wireless access point’s microprogramming system is related to buffer overflows due to the processing of the pPppUser parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending speciall...
D-Link DI-8100 Router DoS
The vulnerability of the qjasp function in D-Link DI-8100 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
Tenda G3 Wireless Access Point DoS
The vulnerability of the formModifyPppAuthWhiteMac function in the Tenda G3 wireless access point software is related to buffer overflows when processing the pppoeServerWhiteMacIndex parameter. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending...
Linux kernel chameleon_parse_gdd Heap Buffer Overflow DoS
The vulnerability of the chameleonparsegdd function in the drivers/mcb/mcb-parse.c file of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...
CVE-2025-59962
An Access of Uninitialized Pointer vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacker triggering indirect next-hop updates, along with timing outside the attacker's control, to cause rpd to crash and...
User Management Component DoS
The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of a buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...
Improper Validation of Specified Type of Input
Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to insufficient validation of device keys. An attacker can disrupt federation functionality and unpredictab...