cve-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...

forkybot_AI

Forkybot AI: Optimized and Secured Bytebot This is an optimized and secured fork of Bytebot, an open-source AI agent that controls a virtual desktop to automate complex tasks. The original project was archived and left unmaintained. This fork rescues the idea, modernizes it, and prepares it for...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...

CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to...

cve-2021-45046

Although log4j RCE CVE-2021-44228 was patched in 2.15, a new vulnerability, CVE-2021-45046 causing DoS, has been discovered. Below are the test results. Test Environment log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 syntax test - Not Vuln 2...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Security Advisory: Infinite Loop DoS in facil.io MIME Parser Partial Boundary Assigned CVE ID : CVE-2026-66730 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced alongside the MIME parser in 0.6.0 Component: lib/facil/http/http.c,...

CVE-2023-46442_POC

CVE-2023-46442POC Environment: Java 8 POC for CVE-2023-46442, Denial of Service vulnerability found within Soot before 4.4.1 under Java 8 When retrieving the body of a maliciously crafted method, a very small size class file or method can cause huge resource consumption and loop forever until a...

CVE-2023-30226

CVE-2023-30226 Rizin is a reverse engineering framework forked from radare2, a flaw was discovered in its ELF parser code that would allow for a crafted file to perform a denial of service. This would prevent a user from being able to load the file into rizin but still hold no impact on the...

CVE-2018-10546

CVE-2018-10546 A user can create specially crafted data that, when processed using a stream filter with 'convert.iconv.', will cause the target application to enter an infinite loop and consume excessive CPU resources CVE-2018-10546. The specific impact of these vulnerabilities depends on the...

CVE-2026-121809

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...

EEF-CVE-2026-121809 CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server

Summary Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...

CVE-2026-121809 CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...

EUVD-2026-125542

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in elixir-grpc grpcserver and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message...

CVE-2026-52789

The BACnet Stack C library for embedded systems is vulnerable to a Denial of Service (DoS) condition in the ReadPropertyMultiple (RPM) handler. Specifically, when processing a malformed RPM request packet lacking expected closing tags, the function handler_read_property_multiple enters an infinit...

iperf3 security update

An update is available for iperf3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Iperf is a tool which can measure maximum TCP bandwidth and tune various...

RLSA-2026:98085 Important: iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fixes: iperf3: iperf3: Denial of Service via UDP receive worker infinite loop CVE-2026-102253 For more details about the...

libpcap security update

An update is available for libpcap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpcap packages provide a portable framework for low-level network...

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 Proof-of-Concept Overview This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786. It will trigger the integer overflow and cause an infinite loop. The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16. For a comprehensive...

CVE-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...