1794 matches found
Exploit-CVE-2017-6008
Exploit-CVE-2017-6008 The CVE-2017-6008 is a vulnerability in the HitmanPro scan that allows privilege escalation by exploiting a kernel pool buffer overflow. The exploits here use the Quota Process Pointer Overwrite attack as described in the Tarjei Mandt's paper Also, the exploits use my Pool...
CVE-2026-115786
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revoking a document. Creation of the recipient’s shared-file record charges the document size to mailbox-wide usage. Revocation...
EUVD-2026-109080
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revoking a document. Creation of the recipient’s shared-file record charges the document size to mailbox-wide usage. Revocation...
CVE-2026-115786
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.20 allows an authenticated user to exhaust another user's mailbox quota. The root cause is an incorrect calculation (CWE-682) where creating a shared-file record charges the document size to mai...
CVE-2026-115786 Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revoking a document. Creation of the recipient’s shared-file record charges the document size to mailbox-wide usage. Revocation...
New API < v0.12.10 - Stripe Webhook Bypass
New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...
PT-2026-122108
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revoking a document. Creation of the recipient’s shared-file record charges the document size to mailbox-wide usage. Revocation...
CVE-2026-115359
OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded certificates, so quota rules scoped to backend-specific roles are not enforced. Valid callers can repeatedly issue tokens...
CVE-2026-115359
The OpenBao software versions before 2.6.4 and 2.7.x before 2.7.1 are vulnerable to a flaw in the rate limit quota subsystem . Specifically, role resolution fails when processing requests with form-encoded bodies or forwarded certificates . This failure prevents the enforcement of quota rules sco...
EUVD-2026-108284
OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded certificates, so quota rules scoped to backend-specific roles are not enforced. Valid callers can repeatedly issue tokens...
CVE-2026-98701
A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When adding mesh network routes, failed or duplicate path requests do not release reserved slot quotas. An adjacent attacker could exploit this issue by repeatedly triggering failed path additions to exhaust the mesh...
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component...
CVE-2026-98444
A flaw was found in the Linux kernel's XFS file system. When flushing disk quota records, the kernel fails to release the quota flush lock if an associated buffer cannot be retrieved. A local user could trigger this condition to cause a system deadlock, resulting in a Denial of Service DoS...
UBUNTU-CVE-2026-98701
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions can exhaust MESHMAXMPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from...
SUSE CVE-2026-98701
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions can exhaust MESHMAXMPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from...
CVE-2026-98701
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions can exhaust MESHMAXMPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from...