CVE-2026-115290

A flaw was found in Elasticsearch. An unauthenticated remote attacker with network access to a node's remote cluster server interface can send specially crafted requests containing deeply nested serialized data. Processing this data triggers excessive recursion, causing the affected node to crash...

CVE-2026-121443

The svg-sanitizer library (versions 1.1.0 before 1.1.1 ) is vulnerable to a Denial of Service (DoS) attack. A remote attacker can crash requests by submitting malformed SVG input containing an unclosed tag, such as a single '

CVE-2026-121443 svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag

svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests by submitting SVG input ending inside an unclosed tag. Attackers can upload truncated input like a single '' to trigger an uncaught ValueError from strpos in...

pyasn1 Decode DoS

The vulnerability in the decode function of the ASN.1 library pyasn1 in Python is related to algorithmic complexity. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-58938

A vulnerability exists in the parseChunk function of MPEG4Extractor.cpp due to improper input validation . This flaw could lead to a remote denial of service without requiring additional execution privileges or user interaction. No specific software version, remediation, or exploit details are pr...

CVE-2026-101678

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability across the network by enticing a user to interact with malicious requests. A successful attack allows the attacker to cause a partial Denial of Service DoS, leading to temporary service...

Exploit for CVE-2026-98432

linux-tcp-uaf-cve-2026-98432 CVE-2026-98432 response kit...

EUVD-2026-115043

In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed fo...

CVE-2026-20560

A vulnerability exists in the Modem component of MediaTek chipsets due to improper input validation . An attacker controlling a rogue base station can cause a system crash , leading to a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional executi...

NGINX Map Directive Code Execution

The vulnerability in the Map Directive component of NGINX Plus and NGINX Open Source web servers is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

PT-2026-135710

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description Multiple functions within ipphelper.c contain a stack-based buffer overflow caused by a missing bounds check. This flaw allows a remote attacker to cause a denial of service without...

CVE-2026-58814: Google Android: In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow

In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Incus Container Management DoS

The vulnerability in the Incus container management system and virtual machine manager is related to flaws in its authorization mechanism. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions and cause a denial of service...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Or use the script python checkicmpdos.py 127.0.0.1 This vulnerability allows an attacker, as long as they are...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...

AirDroidPwner

AirDroidPwner CVE-2019-9599 This exploit is no longer functional Proof of Concept Video: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 What is AirDroid? AirDroid is one of the best known and mos...

CVE-2026-32945

CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...

PUB-A-511552804

In sgentileparam of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-517378147

In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...