-CVE-2024-39614

Djangoにおけるサービス拒否脆弱性の概念実証（PoC） このリポジトリには、Django 5.0（5.0.7より前）および4.2（4.2.14より前）におけるサービス拒否（DoS）脆弱性を実証する概念実証（PoC）スクリプトが含まれています。この脆弱性は、特定の文字を含む非常に長い文字列を処理する際に、getsupportedlanguagevariant関数で発生する可能性のあるDoS攻撃に関連しています。 目次 脆弱性の説明 セットアップと使用方法 PoCスクリプト 重要な考慮事項 緩和策 脆弱性の説明 CVE-ID : （未定） 概要 : Django...

CVE-2026-86463

The Apache CXF FIQL query parser is vulnerable to a Denial of Service condition due to an issue in how it searches for operators within query expressions. When the parser encounters a long string without an operator, it may attempt numerous combinations, leading to excessive CPU consumption . An ...

CVE-2025-46819

CVE-2025-46819 – Redis Lua 长字符串分隔符越界读取 格式错误的长字符串分隔符导致 Redis 8.2.1 中 Lua 词法分析器发生越界读取。 概述 Redis 8.2.1 中的 Lua 长字符串解析器错误处理了格式错误的 =... 序列，返回哨兵值，导致缓冲区下溢或过度递归。攻击者可诱使 Redis 发生越界读取或 C 栈溢出。 环境 Redis 服务器 8.2.1（或 8.2.2 之前的任何受影响版本） redis-cli 可本地网络访问 Redis 实例 文件 CVE-2025-46819.lua – 构造一个巨大的格式错误分隔符并将其提供给...

CVE-2019-11395

CVE-2019-11395 概要 このProof of Concept（PoC）は、MailCarrier 2.51におけるバッファオーバーフローの脆弱性 を示し、リモートの攻撃者が長い文字列を介して任意のコードを実行することを可能にします。この脆弱性は以下のプロセスを使用して悪用される可能性があります： SMTP RCPT TO POP3 USER POP3 LIST POP3 TOP POP3 RETR このプロジェクトは、バッファオーバーフローがどのように機能するかを理解するための学術的なアプローチ を提供することを目的としています。 ⚠️ 警告...

Astra Linux – Vulnerability in uriparser

A issue was discovered in uriparser through 0.9.7. The ComposeQueryMallocExMm function in UriQuery.c has an integer overflow due to the use of a long string...

PT-2026-80529

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

Oj: Integer Overflow in Oj.load 2GB String Handling

Summary Oj.load is vulnerable to heap corruption when parsing a JSON string longer than 2 GB. An integer overflow in bufappendstring buf.h:61 converts the string length to a large negative sizet, causing memcpy to copy an astronomically large amount of data out of bounds. This crashes the process...

CVE-2021-47973

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger ...

CVE-2021-47973 Sticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger ...

CVE-2021-47971

My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an...

CVE-2026-7568

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the metaphone function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed...

CVE-2026-41693

i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options directly into the configured loadPath / addPath templates and then read / write the resulting fil...

ruby: Unsafe parsing of long strings via decode_www_form_component method

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

PT-2026-30466

AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image file fields and click Convert Now to...

EUVD-2018-21742

Microsoft Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by...

EUVD-2018-21732

Microsoft VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an...

Eco Search 安全漏洞

Eco Search is a search tool developed by the Eco Search company. Version 1.0.2.0 of Eco Search contains a security vulnerability. This vulnerability arises from the search function’s improper handling of extremely long strings, which may allow local attackers to cause the application to crash by...

CVE-2018-25244: Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a...

CVE-2018-25240: Improper Handling of Overlap Between Protected Memory Ranges

Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the...

PT-2026-30364

Name of the Vulnerable Software and Affected Versions FastTube version 1.0.1.0 Description A denial of service issue exists that allows local attackers to crash the application. This occurs when an excessively long string, specifically a buffer of 1900 characters, is submitted to the search...