14758 matches found
EUVD-2026-63089
LiquidJS has an infinite loop vulnerability in its striphtml filter...
EUVD-2026-70344
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-80740 drm/log: Fix infinite loop when scale is too large for display
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-80740
CVE-2026-80740 affects the Linux kernel in the drm/log subsystem. When the display scale is large enough that the scaled font exceeds the display dimensions, either the rows or columns variable becomes zero. A zero column count causes an infinite loop in drm_log_draw_kmsg_record() because the loo...
jfrog-CVE-2023-43786-libX11_DoS
CVE-2023-43786 概念验证 概述 这是 libX11 拒绝服务漏洞 CVE-2023-43786 的 DoS 概念验证。 它将触发整数溢出并导致无限循环。 受影响的版本为:libX11 1.8.6 及以下版本,以及 libXpm 3.5.16。 如需全面了解,请参阅随附的博客文章以获取详细信息。 依赖项 存在漏洞的 libXpm 和 libX11 版本 已安装 xpmutils 使用方法 1. 确保已安装 xpmutils: root@kitploit: sudo apt-get install xpmutils 2. 运行 PoC: root@kitploit: sxpm...
CVE-2026-24688
CVE-2026-24688 - pypdf - Vulnerabilidad DoS por Referencia Circular Este repositorio incluye código de prueba de concepto para desencadenar CVE-2026-24688. Resumen Vulnerabilidad crítica de Denegación de Servicio en la lógica de análisis de esquemas marcadores de pypdf. Al procesar un PDF con...
CVE-2026-84309
A flaw was found in pypdf. An attacker can craft a malicious PDF document with a cyclic tree structure. When a writing code path attempts to insert a child object, the TreeObject.insertchild function can follow /Next links indefinitely, leading to an infinite loop. This can result in a denial of...
CVE-2023-46442_POC
CVE-2023-46442POC 环境:Java 8 用于 CVE-2023-46442 的 POC,在 Java 8 环境下发现 Soot 4.4.1 之前的拒绝服务漏洞 在检索恶意构造的方法体时,一个非常小的类文件或方法可能导致 巨大的资源消耗并永远循环,直到达到 OutOfMemory(取决于 JVM 设置) src/main/java/POC.java - 示例易受攻击的程序 src/main/resources/Build$Builder.class - 示例类文件,可能导致 DoS/无限循环(攻击载荷)...
GHSA-JP53-MHQP-8XCG pypdf: Possible infinite loop for TreeObject.insert_child
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
pypdf: Possible infinite loop for TreeObject.insert_child
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
DEBIAN-CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
CVE-2026-84309
pypdf versions prior to 6.16.0 are vulnerable to an infinite loop in TreeObject.insert_child (pypdf/generic/_data_structures.py). An attacker can craft a PDF with a cyclic tree structure that causes the method to follow /Next links indefinitely when a writing code path inserts a child, resulting ...
CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
EUVD-2026-69477
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
libssh: libssh: denial of service via zero advertised channel packet size
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server
A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...