CVE-2019-12401

CVE-2019-12401: Apache Solr의 XML Bomb 5.0.0 이전 버전의 Solr는 업데이트 핸들러를 통한 XML 리소스 소비 공격일명 Lol Bomb에 취약합니다. 공격자는 XML DOCTYPE 및 ENTITY 유형 요소를 활용하여 서버가 XML을 구문 분석할 때 확장되어 OOM을 유발하는 패턴을 만들 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 개념 증명: 자세한 내용과 악용 프로세스는 이 PDF에서 확인할 수 있습니다...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF 안드로이드 NULL PTR DEREF, OOM 버그, 그냥 재미로...

DEBIAN-CVE-2026-107386

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...

CVE-2026-107386 amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...

CVE-2026-107386

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...

CVE-2026-107386 amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...

CVE-2026-107386

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...

PoC_CVE-2025-11579

PoC CVE-2025-11579 概要 rardecode バージョン = 2.1.1 は、大きな RAR 辞書サイズを読み取る際に辞書サイズの制限に失敗します。これにより、攻撃者が特別に細工した RAR ファイルを提供し、メモリ不足によるクラッシュを介したサービス拒否 Denial of Service を引き起こすことが可能です。 エクスプロイト 人為的に大きな辞書サイズを持つ RAR ファイルを作成し、ライブラリに大量のメモリ割り当てを試行させ、その後メモリ不足によるクラッシュを発生させます。 エクスプロイト手順 1. 14Gb.rar ファイルを使用し、go run...

DEBIAN-CVE-2026-61801

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-61801 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-61801

The github.com/moby/sys/user Go package, versions before 0.4.1 , is vulnerable to a Denial of Service (DoS) because it does not sufficiently limit entries when parsing /etc/passwd or /etc/group -style files. An attacker capable of supplying a specially crafted file can trigger excessive memory co...

CVE-2026-61801 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-61801

The "github.com/moby/sys/user" package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing "/etc/passwd"- or "/etc/group"-style files, allowing an attacker who can supply a...

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

A denial-of-service DoS vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process...

GHSA-MJCV-P78Q-W5FW github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

A denial-of-service DoS vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit 음, CVE 번호가 CVE-2008-4654인 오래된 취약점입니다. 이 취약점은 modules/demux/ty.c의 1650번째 줄에서 Out of Memory로 인해 발생합니다. streamReadpdemux-s, mstbuf, 8 + imapsize; 다른 웹사이트에서 EXP를 다운로드했을 때, 내 Windows 7 Ultimate x64에서 제대로 작동하지 않는 것을 발견했습니다. 그래서 리턴 주소를 0x68f0cfad에서 0x6a314b52로 변경했더니 작동합니다! 이전:...

CVE-2026-5769

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

CVE-2026-5769

A vulnerability exists in Brocade SANnav versions prior to 3.0.1 where the Brocade Fabric OS switch admin password may be captured in plaintext within a memory swap file. This occurs when the SANnav server experiences an Out Of Memory (OOM) condition. An authenticated admin user with access to th...

CVE-2026-5769

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

EUVD-2026-94755

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...