The Hidden DoS Vector in SQL Parsers

SQL parsers are critical components of the modern data stack. They validate queries before they reach the database, transpile between dialects, and lint codebases for style violations. Increasingly, they also power AI-driven SQL generation in LLM-integrated data tools. Our research focused on two...

Vaim-sms

Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...

wifi-deauth

A DoS attack that disconnects all devices from a target wifi network. The network's password is not required Tested on Kali NetHunter Snapshot at the bottom IMPORTANT In some occasions, network APs might operate on both 5GHz and 2.4GHz under the same BSSID/SSID name. In order to truly bring the A...

EUVD-2026-92914

A flaw was found in sssd. A local attacker can trigger a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request when passkey authentication is enabled. Due to a missing state validation check in passkey Kerberos handling, the PAM responder dereferences an...

CVE-2026-104043

A flaw exists in SSSD where a local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow . By sending a specially crafted request with an undersized packet header, the attacker can cause an out-of-bounds memory read during packet parsing. Th...

EUVD-2026-92912

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

CVE-2026-104042

A vulnerability exists in sssd where a local attacker can trigger a Denial of Service (DoS) . The flaw is caused by an out-of-bounds read (CWE-125) occurring when the service processes a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token sent to th...

EUVD-2026-92911

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104039 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

A flaw was found in SSSD. A local user can cause a denial of service DoS by disrupting system authentication services. When handling Generic Security Services Application Programming Interface GSSAPI authentication in the Pluggable Authentication Module PAM responder, cached connection state is...

CLEANSTART-2026-KP61093 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input

Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input...

CLEANSTART-2026-JM55948 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...

peanalyzer

peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

EUVD-2026-92896

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104036

A flaw in the SSSD NFS idmap plugin allows for an out-of-bounds write when retrieving cached user or group names. The vulnerability occurs because the plugin identifies that an entry exceeds the destination buffer size but fails to abort the operation before copying the data. A local attacker can...

CVE-2026-104032

A flaw in SSSD allows an unprivileged local user to trigger a Denial of Service (DoS) . Due to missing authorization checks, an attacker can repeatedly request master automount map updates through the autofs responder . This action causes global cache invalidation , forcing continuous lookups to ...

EUVD-2026-92888

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly...

The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

esp32-wifi-penetration-tool

ESP32 Wi-Fi Penetration Tool This project introduces an universal tool for ESP32 platform for implementing various Wi-Fi attacks. It provides some common functionality that is commonly used in Wi-Fi attacks and makes implementing new attacks a bit simpler. It also includes Wi-Fi attacks itself li...