156 matches found
CVE-2026-73273
Gitea versions ≤ 1.27.2 are vulnerable to a memory exhaustion issue in the Maven upload handler . When a Maven artifact is uploaded with a checksum extension (e.g., ".md5", ".sha256"), the handler uses io.ReadAll to read the entire request body into memory before enforcing the LIMIT_SIZE_MAVEN qu...
CVE-2026-73273
Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This...
CVE-2026-73273 Gitea Maven checksum upload quota bypass and memory exhaustion
Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This...
CVE-2026-73273 Gitea Maven checksum upload quota bypass and memory exhaustion
Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This...
CVE-2026-73273
Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This...
GO-2026-6578 Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudreve
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudreve...
PT-2026-105597
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudreve...
WordPress MasterStudy LMS plugin < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass vulnerability
Subscriber+ Membership Plan Quota and Category Restriction Bypass vulnerability discovered by Arman Kumar in WordPress Plugin MasterStudy LMS versions 3.7.50...
GHSA-XJ3H-WWXQ-GFCJ Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
Summary Cloudreve v4 splits the storage-quota check reading the user's used bytes and comparing them to MaxStorage and the charge incrementing users.storage into two non-atomic steps in the PrepareUpload code path. This creates a Time-of-Check to Time-of-Use TOCTOU race condition. Any authenticat...
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
Summary Cloudreve v4 splits the storage-quota check reading the user's used bytes and comparing them to MaxStorage and the charge incrementing users.storage into two non-atomic steps in the PrepareUpload code path. This creates a Time-of-Check to Time-of-Use TOCTOU race condition. Any authenticat...
CVE-2026-77633
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...
CVE-2026-77633 Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...
CVE-2026-77633 Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...
EUVD-2026-84528
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...
CVE-2026-61617
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...
CVE-2026-61617 Pterodactyl Wings SFTP write path does not enforce disk quota, allowing node-wide disk exhaustion
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...
EUVD-2026-66776
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...
CVE-2026-61617 Pterodactyl Wings SFTP write path does not enforce disk quota, allowing node-wide disk exhaustion
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...
CVE-2026-61617: Allocation of Resources Without Limits or Throttling
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...
PT-2026-82313
Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quota during a transfer, allowing a tenant with SFTP write access to a single server to exhaust the host node's physical...