903151 matches found
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths
A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these...
CVE-2026-112046
A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation error triggers an infinite loop within the method resolutio...
CVE-2026-107325
A flaw was found in the MongoDB Go Driver due to improper validation of Binary JSON BSON array lengths. An unauthenticated remote attacker can exploit this vulnerability by supplying specially crafted BSON array data to an affected application. When the application validates this malformed input,...
CVE-2026-75466
A flaw was found in libjpeg-turbo. This vulnerability, located in the PNG image loader, allows a remote attacker to trigger a denial of service DoS. By processing a specially crafted indexed-color PNG image, an integer division-by-zero error can occur, leading to application instability and crash...
CVE-2026-53493
A flaw was found in containerd. During an image pull operation, containerd fails to enforce recursion and deduplication limits when traversing descriptor graphs in Open Container Initiative OCI image indexes. A remote attacker can exploit this flaw by serving a crafted image index, triggering...
CVE-2026-106547
A flaw was found in HDF5. An attacker could exploit this heap-based buffer overflow by providing a specially crafted HDF5 file to an application. Due to improper metadata validation when reading unallocated dataset chunks, the library writes data past the boundary of an allocated memory buffer...
USN-8934-1 pyjwt vulnerabilities
Kingsley Olukanni discovered that PyJWT did not properly handle unknown key identifiers when retrieving signing keys. An attacker could possibly use this issue to amplify requests to the configured key endpoint, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu...
CVE-2004-0558
This is a proof of concept exploit for CVE-2004-0558 Specific versions of CUPs 1.1.x are vulnerable to a Denial of Service attack when sent a zero-length UDP packet https://www.exploit-db.com/exploits/24599/ It's worth noting that this can be achieved with nmap, and this exploit was developed for...
CVE-2019-14530
CVE-2019-14530 Path traversal and DoS vulnerability in OpenEMR project Vulnerable function in file: /openemr/custom/ajaxdownload.php Conditions: 1. any authorized user 2. for DoS case: directory "/sites/default/documents/cqmqrda/" must exists on server Due to logic of "unlink" function, path to...
CVE-2026-66859
A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...
CVE-2024-21762-Safe-Check
CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...
CVE-2026-98467
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64 architecture. A race condition during the teardown of nested virtual machine memory mappings can cause the kernel to dereference a null pointer. A local user or nested guest can trigger concurrent memory...
CVE-2026-98532
A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service DoS or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the declared length of a header fits within the received packet data...
CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
cve-2016-4845_csrf
cve-2016-4845csrf Proof of concept for CSRF vulnerabilityCVE-2016-4825 on IO-DATA Recording Hard Disc Drive. License These codes are released under the MIT License. Please see LICENSE.txt...
middleware-auth-bypass
middleware-auth-bypass CVE-2025-29927 a poc of the next.js middleware authentication bypass...
CVE-2016-0752
Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...
CVE-2002-0200
CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...
CVE-2021-21341
CVE-2021-21341 XStream DoS XStream Official Announcement CVE-2021-21341 Vulnerability CVE-2021-21341: XStream can cause a Denial of Service. Affected Versions All versions until and including version 1.4.15 are affected, if using the version out of the box. No user is affected, who followed the...