CVE-2026-53916

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them without limit, exhausting the JVM hea...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper configuration of the LengthFieldBasedFrameDecoder value. An attacker can cause the application to exhaust JVM heap memory and disrupt service availability by sending...

PT-2026-45385

Name of the Vulnerable Software and Affected Versions Apache Fluss versions prior to 0.9.1 Description The Netty LengthFieldBasedFrameDecoder is configured with Integer.MAX VALUE as the maximum frame length. This allows unauthenticated remote attackers to exhaust JVM heap memory on TabletServer a...

Exploit for Memory Allocation with Excessive Size Value in Apache Activemq

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit for...

Apache ActiveMQ 6.1.6 Denial of Service

Apache ActiveMQ version 6.1.6 denial of service proof of concept exploit. This tool sends malicious OpenWire packets to exhaust the JVM heap memory of the target server, potentially crashing the ActiveMQ service on port 61616...