4116 matches found
cve-2023-44487-demo
⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack This project demonstrates the HTTP/2 "Rapid Reset" vulnerability CVE-2023-44487 that allows attackers to overwhelm servers using RSTSTREAM frames, causing denial-of-service DoS. It includes: ✅ Exploit test using Golang-based tool ✅ Vulnerable Apac...
CVE-2022-21907
CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux sudo apt-get install jq Download and use the script git clone...
rsc-security-auditor
🛡️ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. 🚨 Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...
cve
CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...
CVE-2022-41404-DoS-Protection
CVE-2022-41404-DoS-Protection Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection...
Astra Linux – vulnerability in Firefox and Thunderbird
Denial-of-service caused by an invalid pointer in the Audio/Video: Web Codecs component. This vulnerability has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
Astra Linux – vulnerability in Apache2
The Apache HTTP Server protocol handler for the HTTP/2 protocol compares received request headers against the size limits defined for the server; these limits also apply to the HTTP/1 protocol. Upon violating these restrictions, an HTTP response is sent to the client containing a status code...
SUSE SLES15: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (SUSE-SU-2026:4114-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4114-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...
Astra Linux – Vulnerability in node-body-parser
body-parser is a Node.js body parsing middleware. body-parser version 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue has...
OPENSUSE-SU-2026:21834-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...
CVE-2026-49315
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...
freerdp security update
An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...
Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...
Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...
Red Hat Security Advisory 2026-55862-03
Red Hat Security Advisory 2026-55862-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100095)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100095 advisory. In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not...
Linux Distros Unpatched Vulnerability : CVE-2026-74542
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue...