CVE-2025-34226

CVE-2025-34226: Persistent DoS in OpenPLC Runtime Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34226 Affects| OpenPLC Runtime V3 Fixed in| commit 095ee09623dd229b64ad3a1db38a901a3772f6fc Severity| High CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N 7.1...

CVE-2026-101161

The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when the WP Ultimate Review WordPress plugin...

CVE-2022-43293

Exploits para CVE-2022-43293 Para lograr una Denegación de Servicio persistente de Windows como se muestra en el POC anterior, simplemente ejecute Exploit.bat e ingrese %windir%\system32\cng.sys cuando se le pregunte qué archivo desea sobrescribir. Aquí puede encontrar mi informe de Vulnerabilida...

CVE-2025-70886

CVE-2025-70886 针对 CVE-2025-70886 的概念验证（PoC）利用程序，该漏洞是 Halo CMS（v2.22.4 及更早版本）中的一个持久性拒绝服务漏洞，允许远程攻击者通过提交畸形负载导致管理评论界面崩溃。 基本信息 产品供应商: 凌霞软件 供应商网站: https://www.lxware.cn/ 受影响对象类型: 软件 / Web 应用程序 受影响产品: Halo CMS 受影响产品版本: = v2.22.4 漏洞类型: 持久性 DoS（存储型 DoS）/ 未处理异常 攻击类型: 远程 影响: 拒绝服务（管理评论页面返回 HTTP 500 / 内部服务器错误...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc Multiple Vulnerabilities (crlsa-2020_4490)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204490 advisory. GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS CVE-2019-13050 Tenable h...

BIT-MONGODB-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

BIT-MONGODB-2026-82057 Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...

CVE-2026-28617

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74016

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73976

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

A persistent denial of service vulnerability exists in the VoiceInteractionManagerService.java file within the initForUserNoTracing function. The root cause is resource exhaustion , which could lead to a local denial of service. Exploitation requires no additional execution privileges and does no...

CVE-2026-28617

A vulnerability exists in the WifiNetworkSuggestionsManager.java component, leading to a possible persistent Denial of Service (DoS) due to resource exhaustion . This flaw allows for a local DoS attack without requiring additional execution privileges or user interaction. The vulnerability affect...

EUVD-2026-73966

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-82065

CVE-2026-82065 affects the MongoDB Server storage engine integration layer. An authenticated user with collection creation privileges can supply malformed storage configuration options that bypass validation and are persisted to durable metadata. When that metadata is later read by diagnostic ope...

Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-28666: Incorrect Authorization

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87158

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A security issue in the storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validati...

CVE-2026-85239

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...