799 matches found
CVE-2025-13466
body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This c...
Siemens SIMATIC S7-1500 Allocation of Resources Without Limits or Throttling (CVE-2024-28182)
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK...
Denial of Service (DoS)
Overview github.com/dvsekhvalnov/jose2go is a Pure Golang GO library for generating, decoding and encrypting JSON Web Tokens. Zero dependency, relies only on standard library. Affected versions of this package are vulnerable to Denial of Service DoS via the processing of crafted JSON Web Encrypti...
Bugsink 安全漏洞
Bugsink is a self-hosted bug tracking software from Bugsink Open Source. A security vulnerability exists in Bugsink versions prior to 2.0.6, which stems from a specially crafted Brotli compressed envelope that may lead to excessive CPU time consumption, possibly resulting in a denial of service...
OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses
Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...
BIT-GOLANG-2025-61725 Excessive CPU consumption in ParseAddress in net/mail
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
AZL-69257 CVE-2025-61724 affecting package golang 1.26.0-1
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...
Wireshark 4.2.x < 4.2.14 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service...
EUVD-1999-1548
Malware in sbrugna...
EUVD-2021-1989
Malware in sbrugna...
EUVD-2018-13021
Malware in sbrugna...
EUVD-2018-0918
Malware in sbrugna...
EUVD-2004-0477
Malware in sbrugna...
EUVD-2020-12530
Malware in sbrugna...
EUVD-2021-26263
Malware in sbrugna...
EUVD-2020-12546
Malware in sbrugna...
EUVD-2017-3784
Malware in sbrugna...
EUVD-2017-11531
Malware in sbrugna...