CVE-2017-7472

CVE-2017-7472 4.10.13 이전의 Linux 커널에서 KEYS 하위 시스템은 로컬 사용자가 일련의 KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring 호출을 통해 서비스 거부메모리 소비를 유발할 수 있게 합니다. 요약 취약한 커널 4.10.13...

CVE-2025-43960

CVE-2025-43960 - Injection d'objets PHP dans Adminer 4.8.1 via Monolog - Déni de service DoS Après des mois d'attente d'une réponse de MITRE, j'ai obtenu CVE-2025-43960 avec une attaque par injection d'objets PHP contre le service Adminer 4.8.1, provoquant un déni de service DoS par manipulation ...

GO-RPCBOMB

설명: CVE-2017-8779 rpcbind 0.2.4까지, LIBTIRPC 1.0.1까지 및 1.0.2-rc부터 1.0.2-rc3까지, 그리고 NTIRPC 1.4.3까지는 XDR 문자열에 대한 메모리 할당 시 최대 RPC 데이터 크기를 고려하지 않으며, 이는 원격 공격자가 조작된 UDP 패킷을 포트 111에 전송하여 서비스 거부후속 해제 없이 메모리 소비를 유발할 수 있게 합니다. 이 취약점은 rpcbomb으로 알려져 있습니다. CVE 링크 https://vulners.com/cve/CVE-2017-8779 설치 절차 가정...

CVE-2007-5962

CVE-2007-5962 1. Введение Мой инструмент написан на Python и эксплуатирует уязвимость CVE-2007-5962, выполняя серию смен каталогов, которые приводят к краху ftp-демона. root@kitploit: ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ!!! Обратите внимание, что использование хакерских инструментов без авторизации незаконно...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

devalue: devalue: Excessive memory consumption via deserialization of sparse arrays

A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the devalue.parse function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resultin...

CVE-2026-18929

Carbone's yazl-based zip decompression of .docx files lacks entry-size validation, enabling zip-bomb attacks that cause excessive memory consumption and server crashes. CVSS 6.9 (MEDIUM). Fixed in versions 3.8.2, 4.26.3, and 5.4.4. No in-the-wild exploitation reported. Details: https://github.com...

SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

Exploit for CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + Environment...

CVE-2026-48804

A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

DEBIAN-CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

UBUNTU-CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

UBUNTU-CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...

CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-71870 pypdf: Possible large memory usage for large /ToUnicode streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

Use of Blocking Code in Single-threaded, Non-blocking Context

Overview org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Use of Blocking Code in Single-threaded, Non-blocking Context via the ticks parameter in radar diagrams. An attack...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the engineLoad method of BcFKSKeyStoreSpi, which reads HMAC PBKDF2 or scrypt cost parameters from a keystore's integrity structures and runs key derivation before MAC verification,...