BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF Android 上的空指针解引用（NULL PTR DEREF）漏洞，OOM 只是为了好玩...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

PoC_CVE-2025-11579

PoC CVE-2025-11579 概述 rardecode 版本 = 2.1.1 在读取较大的 RAR 字典大小时未能限制字典大小，这允许攻击者提供特制的 RAR 文件，并通过内存不足崩溃导致拒绝服务。 漏洞利用 我们构造一个具有人为超大字典大小的 RAR 文件，导致库尝试进行大规模内存分配，然后发生内存不足崩溃。 漏洞利用步骤 1. 使用 14Gb.rar 文件并执行 go run exploit.go。 2. 使用提供的普通 simple.rar 文件并运行漏洞利用程序。它被成功提取。...

CVE-2026-77354

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an...

CVE-2026-86201

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

CVE-2026-86201

PocketMine-MP versions prior to 5.41.1 are susceptible to a log-based denial of service (LogDoS) vulnerability in LoginPacket processing. The root cause is that large or complex structures in unknown clientData JWT properties trigger excessive logging without sanitization, allowing an unauthentic...

CVE-2026-86201 PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

EUVD-2026-74912

PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-利用 嗯，这只是一个旧漏洞，其CVE编号是CVE-2008-4654。该漏洞由 modules/demux/ty.c 第1650行的内存不足导致。 root@kitploit: streamReadpdemux-s, mstbuf, 8 + imapsize; 当我从其他网站下载EXP时，发现它在我的Windows 7 Ultimate x64上无法正确运行。所以我将返回地址从0x68f0cfad改为0x6a314b52，然后就成功了！ 旧版： root@kitploit: 0x68f0cfad : jmp esp PAGEEXECUTEREAD...

EUVD-2026-70251

HTTPX2: Streaming response decompression does not bound peak memory decompression amplification...

GHSA-8XX6-HGC6-GC2M HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

Summary When decoding a compressed response body gzip, deflate, br, or zstd, HTTPX2 fully decompressed each network read before yielding content to the application. A small compressed input could therefore cause a large intermediate memory allocation, even when the application streamed the respon...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand function, which can lead to excessive memory consumption. This can cause a denial of service DoS by crashing the application due to an out-of-memory error...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

EUVD-2026-56926

ffuf denial of service OOM via HTTP response decompression bomb...

GHSA-JCVH-XF52-2CWM ffuf denial of service (OOM) via HTTP response decompression bomb

Summary A malicious or attacker-controlled target server can crash ffuf with an out-of-memory condition by returning a compressed HTTP response that decompresses to a very large body a decompression bomb. This works against default usage with no special flags. Details The response body size guard...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

SUSE CVE-2026-84304

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...