PT-2026-104685

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20540: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

check_icmp_dos

checkicmpdos iOS 12 / OS X दूरस्थ कर्नेल हीप ओवरफ़्लो CVE-2018-4407 POC: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 या स्क्रिप्ट का उपयोग करें python checkicmpdos.py 127.0.0.1 यह भेद्यता हमलावर को उसी Wi-Fi नेटवर्क से जुड़ने क...

CVE-2017-0541

poc और CVE-2017-0541 का भेद्यता विश्लेषण...

CVE-2024-54085

CVE-2024-54085: AMI MegaRAC BMC में प्रमाणीकरण बाईपास की गंभीर भेद्यता प्रभावित सिस्टम यह भेद्यता बड़े निर्माताओं के सर्वर हार्डवेयर की एक विस्तृत श्रृंखला को प्रभावित करती है: AMI MegaRAC SPx : संस्करण 12.x से 12.7 और 13.x से 13.5 तक HPE Cray XD670 : संस्करण 1.09, 1.13, 1.17 Asus RS720A-E11-RS24...

CVE-2017-11499

Node.js-विशिष्ट सुरक्षा दोष स्थिर हैशटेबल बीज CVE-2017-11499 Node.js हैश फ्लडिंग रिमोट DoS हमलों के लिए संवेदनशील था क्योंकि हैशटेबल बीज Node.js के किसी दिए गए रिलीज़ संस्करण में स्थिर था। यह डिफ़ॉल्ट रूप से V8 स्नैपशॉट सक्षम के साथ बनाने का परिणाम था जिसके कारण प्रारंभिक रैंडमाइज़्ड बीज स्टार्टअ...

CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...

CVE-2026-104844

A flaw was found in postcss-selector-parser. A remote attacker could exploit this vulnerability by submitting a specially crafted CSS selector containing numerous class or ID identifiers to an application that parses untrusted input. Due to inefficient processing and repeated scanning during...

CVE-2026-94638

A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...

ROS-20261002-73-0133

The vulnerability in Xen is related to errors in processing the length of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261002-73-0137

The vulnerability in Xen is related to errors in processing the length of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261002-73-0077

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

ROS-20261002-73-0078

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

ROS-20261002-73-0079

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-86344 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

CVE-2026-86344

A flaw in 389-ds-base allows an unauthenticated remote attacker to perform a denial of service (DoS) attack. By sending a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on a single connection, the attacker can force the server to hand that connection to a second ...

CVE-2026-93207

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

CVE-2026-53716

A flaw was found in Envoy Gateway. A remote attacker, by providing a specially crafted compressed WebAssembly Wasm payload through a tenant-controlled URL, can exploit a vulnerability where the system decompresses the gzip file without limiting the output size. This can lead to an uncontrolled...

sqlparse: sqlparse: Denial of Service via inefficient SQL parsing

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input. This flaw causes inefficient processing of certain SQL patterns, leading to excessive CPU consumption and potentially a Denial of Service DoS...