CVE-2025-34226

CVE-2025-34226：OpenPLC 运行时中的持久化拒绝服务 漏洞概述 字段| 值 ---|--- CVE ID| CVE-2025-34226 影响| OpenPLC 运行时 V3 修复版本| 提交 095ee09623dd229b64ad3a1db38a901a3772f6fc 严重程度| 高 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N 7.1（高） CWE| CWE-664 资源生命周期控制不当，CWE-20 输入验证不恰当 概要 OpenPLC 运行时在...

CVE-2025-70886

CVE-2025-70886 针对 CVE-2025-70886 的概念验证（PoC）利用程序，该漏洞是 Halo CMS（v2.22.4 及更早版本）中的一个持久性拒绝服务漏洞，允许远程攻击者通过提交畸形负载导致管理评论界面崩溃。 基本信息 产品供应商: 凌霞软件 供应商网站: https://www.lxware.cn/ 受影响对象类型: 软件 / Web 应用程序 受影响产品: Halo CMS 受影响产品版本: = v2.22.4 漏洞类型: 持久性 DoS（存储型 DoS）/ 未处理异常 攻击类型: 远程 影响: 拒绝服务（管理评论页面返回 HTTP 500 / 内部服务器错误...

CVE-2022-43293

Exploits for CVE-2022-43293 To get a persistent Windows Denial of Service as shown in the POC above, simply run Exploit.bat and enter %windir%\system32\cng.sys when you're asked which file you want to overwrite. Here you can find my Arbitrary File Write\Overwrite Vulnerability report. Here you ca...

CVE-2026-28617

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74016

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73976

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

CVE-2026-28633 is a persistent denial of service vulnerability in the initForUserNoTracing method of VoiceInteractionManagerService.java , part of the Android Framework. The root cause is resource exhaustion , which can lead to local denial of service requiring only low privileges and no user int...

CVE-2026-28617

CVE-2026-28617 affects the WiFi subcomponent of Android's Project Mainline, specifically in WifiNetworkSuggestionsManager.java . The root cause is a persistent denial-of-service due to resource exhaustion , enabling a local attacker to degrade device availability without requiring additional priv...

EUVD-2026-73966

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-82065

CVE-2026-82065 affects the MongoDB Server storage engine integration layer. An authenticated user with collection creation privileges can supply malformed storage configuration options that bypass validation and are persisted to durable metadata. When that metadata is later read by diagnostic ope...

Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-85239

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

CVE-2026-85239 MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

CVE-2026-82738

An Improper Input Validation flaw in ash-project ash (Elixir framework) allows an attacker to permanently poison a database record. The Ash.Type.UUIDv7 type's cast_input/2 accepts any well-formed UUID string and stores it as a 16-byte binary. However, on read, cast_stored/2 routes the binary back...