Lucene search
+L

3024 matches found

Kitploit
Kitploit
added 2026/08/27 1:43 p.m.2 views

CVE-2019-12401

CVE-2019-12401: قنبلة XML في Apache Solr إصدارات Solr قبل 5.0.0 معرضة لهجوم استهلاك موارد XML المعروف أيضًا باسم Lol Bomb عبر معالج التحديث الخاص بها. من خلال استغلال عناصر من نوع XML DOCTYPE و ENTITY، يمكن للمهاجم إنشاء نمط يتوسع عند قيام الخادم بتحليل XML مما يسبب نفاد الذاكرة OOMs. إفصاح البائ...

7.5CVSS7.4AI score0.07444EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 9:15 a.m.1 views

PoC_CVE-2025-11579

PoC CVE-2025-11579 개요 rardecode 버전 = 2.1.1은 대용량 RAR 사전 크기를 읽을 때 사전 크기를 제한하지 않아, 공격자가 특수하게 제작된 RAR 파일을 제공하여 Out Of Memory 크래시를 통한 서비스 거부Denial of Service를 유발할 수 있습니다. 익스플로잇 인위적으로 큰 사전 크기를 가진 RAR 파일을 제작하여 라이브러리가 대규모 메모리 할당을 시도하게 만들고, 이후 Out Of Memory 크래시가 발생하도록 합니다. 익스플로잇 단계 1. 14Gb.rar 파일을 사용하고 go...

6.5CVSS8.5AI score0.00349EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 4:17 a.m.2 views

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS SUR ANDROID NULL PTR DEREF, OOM JUSTE POUR LE LOL...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:18 a.m.2 views

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Эксплойт Ну, это просто старая уязвимость с номером CVE-2008-4654. Эта уязвимость вызвана нехваткой памяти в строке 1650 файла modules/demux/ty.c. root@kitploit: streamReadpdemux-s, mstbuf, 8 + imapsize; Когда я скачал эксплойт с других сайтов, я обнаружил, что он некорректно...

9.3CVSS5.2AI score0.57547EPSS
SaveExploits10
Github Security Blog
Github Security Blog
added 2026/08/26 2:10 p.m.6 views

http4s has HTTP/2 Denial of Service with Ember Backend

Summary http4s 0.23.x and 1.0 servers running ember with http2 enabled are vulnerable to a denial of service attack using a HPACK bomb vulnerability recently disclosed as affecting other http2 servers. Impact Denial of Service: - Affects any http4s server running the ember backend with HTTP/2...

8.2CVSS5.5AI score
SaveExploits0References5Affected Software3
CVE
CVE
added 2026/08/26 2:10 p.m.14 views

CVE-2026-54556

http4s (Scala HTTP library) versions prior to 0.23.35 and 1.0.0-M47 are vulnerable to an out-of-memory denial of service when using the Ember backend with HTTP/2 enabled. The root cause is a HPACK bomb : the Hpack wrapper concatenates HEADERS and CONTINUATION frame fragments into a single decoded...

8.2CVSS5.3AI score
SaveExploits0References4
NVD
NVD
added 2026/08/25 11:16 a.m.8 views

CVE-2026-12600

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

8.7CVSS0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/24 9:48 p.m.7 views

CVE-2026-14682

A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory OOM error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of...

8.7CVSS5.4AI score0.00277EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Bouncycastle

Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...

5.5CVSS6.2AI score0.00932EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2026/08/24 7:11 a.m.12 views

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...

7.5CVSS5.9AI score0.00466EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/20 6:37 p.m.51 views

CVE-2026-53585

libgit2 versions before 1.8.6 and 1.9.5 are vulnerable: git_delta_apply in src/libgit2/delta.c passes an attacker-controlled res_sz value to git__malloc before validating delta instructions, allowing a small multi-level OFS_DELTA chain to retain huge allocations and exhaust memory. Attack vectors...

5.3CVSS8.4AI score0.00329EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/20 5:26 p.m.7 views

GHSA-QQFF-5854-PX68 vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

Unbounded Multipart Cookie Allocation DoS in vouch-proxy Summary vouch-proxy v0.47.2 contains an unauthenticated remote denial-of-service vulnerability in its multipart cookie reassembly logic. The /validate endpoint parses the total cookie part count directly from the attacker-controlled cookie...

7.5CVSS5.8AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/20 4:08 p.m.8 views

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...

7.5CVSS5.8AI score0.00466EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.9 views

PT-2026-80760

Name of the Vulnerable Software and Affected Versions vouch-proxy version 0.47.2 Description An unauthenticated remote denial-of-service issue exists in the multipart cookie reassembly logic. The /validate and / external-auth-:id endpoints parse the total cookie part count directly from the cooki...

7.5CVSS5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.13 views

PT-2026-78680

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit reads /etc/passwd and /etc/group files without an upper bound when resolving a username to a user or group identifier within the executor/oci/user.go and solver/llbsolver/ops/user linux.go...

2.3CVSS5.2AI score0.00404EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/19 12:00 a.m.5 views

UBUNTU-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

5.1CVSS5.2AI score0.00182EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/18 4:48 p.m.8 views

GO-2026-6115 WITHDRAWN: Multiple denial of service vulnerabilities in rsc.io/pdf and forks

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". The PDF parser in rsc.io/pdf and its downstream forks github.com/ledongthuc/pdf and github.com/dslipak/pdf contains multiple defects when parsing untrusted input: - Unchecked /Size, /Index,...

5.7AI score
SaveExploits0References5
OSV
OSV
added 2026/08/18 4:38 p.m.7 views

GO-2026-6173 WITHDRAWN: Pre-protocol error reader permits unbounded memory consumption in github.com/lib/pq

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". The special-case parser for PostgreSQL pre-protocol plain-text errors in github.com/lib/pq calls bufio.Reader.ReadString0 without a byte limit. A malicious PostgreSQL endpoint or active...

5.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/08/18 4:32 p.m.6 views

RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

Summary ValueReader.readBytes allocates a byte array sized by a wire-declared content length without validating it against actual frame data. A malicious AMQP peer triggers OOM by declaring a 2GB string/bytes field. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines...

8.7CVSS5.6AI score0.00422EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/17 2:57 p.m.3 views

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...

7.5CVSS5.9AI score0.00466EPSS
SaveExploits0References7
Rows per page
Query Builder