BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF Android 上的空指针解引用（NULL PTR DEREF）漏洞，OOM 只是为了好玩...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Resumen Las versiones = 2.1.1 de rardecode no restringen el tamaño del diccionario al leer tamaños de diccionario RAR grandes, lo que permite a un atacante proporcionar un archivo RAR especialmente diseñado y causar una Denegación de Servicio mediante un fallo por Agotamiento d...

CVE-2026-77354

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an...

CVE-2026-86201

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

CVE-2026-86201

PocketMine-MP versions prior to 5.41.1 are susceptible to a log-based denial of service (LogDoS) vulnerability in LoginPacket processing. The root cause is that large or complex structures in unknown clientData JWT properties trigger excessive logging without sanitization, allowing an unauthentic...

CVE-2026-86201 PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

EUVD-2026-74912

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-利用 嗯，这只是一个旧漏洞，其CVE编号是CVE-2008-4654。该漏洞由 modules/demux/ty.c 第1650行的内存不足导致。 root@kitploit: streamReadpdemux-s, mstbuf, 8 + imapsize; 当我从其他网站下载EXP时，发现它在我的Windows 7 Ultimate x64上无法正确运行。所以我将返回地址从0x68f0cfad改为0x6a314b52，然后就成功了！ 旧版： root@kitploit: 0x68f0cfad : jmp esp PAGEEXECUTEREAD...

EUVD-2026-70251

HTTPX2: Streaming response decompression does not bound peak memory decompression amplification...

GHSA-8XX6-HGC6-GC2M HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

Summary When decoding a compressed response body gzip, deflate, br, or zstd, HTTPX2 fully decompressed each network read before yielding content to the application. A small compressed input could therefore cause a large intermediate memory allocation, even when the application streamed the respon...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...

CVE-2019-12401

CVE-2019-12401: Apache Solr 中的 XML 炸弹 5.0.0 之前的 Solr 版本容易受到通过其更新处理器的 XML 资源消耗攻击（即 Lol 炸弹）的影响。 通过利用 XML DOCTYPE 和 ENTITY 类型元素，攻击者可以创建一个模式，当服务器解析 XML 时该模式会扩展，导致内存溢出 OOM。 供应商披露： 供应商对该漏洞的披露和修复可以在此处找到。 概念验证： 更多细节和利用过程可以在这个PDF中找到。...

EUVD-2026-56926

ffuf denial of service OOM via HTTP response decompression bomb...

GHSA-JCVH-XF52-2CWM ffuf denial of service (OOM) via HTTP response decompression bomb

Summary A malicious or attacker-controlled target server can crash ffuf with an out-of-memory condition by returning a compressed HTTP response that decompresses to a very large body a decompression bomb. This works against default usage with no special flags. Details The response body size guard...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

SUSE CVE-2026-84304

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...