SUSE CVE-2026-75507

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specifiedrules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation...

CVE-2025-62727-Demo

CVE-2025-62727 Demo Victim Description The target victim of CVE-2025-62727 is a simple FastAPI app that: Serves Hello World at /. Serves static files under /static using Starlette's StaticFiles. Auto-generates text files containing A repeated N times for N in 1024, 2048, 50176 on startup. How to...

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i Reference links CVE-2020-28488 Snyk jQuery UI Report...

hexcymatix

hexcymatix hexcymatix is an exploratory research project, loosely envisioned as a binary reverse engineering tool for extracting structural information from repeated byte patterns in binary files. The idea never materialized into a usable tool, but still yields some fascinating representations of...

PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

Summary When PhpSpreadsheet loads an OpenDocument Spreadsheet .ods, Ods::processTableRow reads the table:number-rows-repeated attribute of a with an unchecked int cast, then materialises one cell per repeated row. This value is completely unbounded, so a single 1.4 KB file can instruct the reader...

GHSA-J2W7-387V-M2RQ PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

Summary When PhpSpreadsheet loads an OpenDocument Spreadsheet .ods, Ods::processTableRow reads the table:number-rows-repeated attribute of a with an unchecked int cast, then materialises one cell per repeated row. This value is completely unbounded, so a single 1.4 KB file can instruct the reader...

EUVD-2026-108267

PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion DoS...

UBUNTU-CVE-2026-75507

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specifiedrules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation...

Node.js 26.12.0 Crypto Entropy Cache Duplication

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 may save crypto entropy caches into startup snapshots and single executable applications, causing repeated random values across processes...

CVE-2026-106074

A flaw in Node.js "crypto" causes the internal entropy caches used by "crypto.randomUUID", "crypto.randomUUIDv7", and "crypto.randomInt" to be saved into user-land startup snapshots "--build-snapshot" and single executable applications built with "useSnapshot". If any of these functions, or an AP...

Linux Distros Unpatched Vulnerability : CVE-2026-75507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in...

CVE-2026-101755

A flaw was found in MySQL client programs. An authenticated attacker with network access and low privileges could exploit this vulnerability across multiple protocols. A successful attack allows the threat actor to cause an application hang or repeated crash, resulting in a complete Denial of...

Allocation of Resources Without Limits or Throttling

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ODS file reader in src/PhpSpreadsheet/Reader/Ods.php, where the...

CVE-2026-108359

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a...

CVE-2026-108359 PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a...

CVE-2026-108359 PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a...

CVE-2026-108359 PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a...

CVE-2026-108359

The PhpSpreadsheet PHP library (prior to versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0 ) is vulnerable to a Denial of Service (DoS) attack via the ODS reader. The root cause is located in Ods::processTableRow within src/PhpSpreadsheet/Reader/Ods.php, where the component accepts an unbounded ...

PT-2026-121481

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.30.7 PhpSpreadsheet versions prior to 2.1.19 PhpSpreadsheet versions prior to 2.4.8 PhpSpreadsheet versions prior to 3.10.8 PhpSpreadsheet versions prior to 5.10.0 Description The Ods::processTableRow functio...

EUVD-2026-104404

Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like + or +a, which analyzeRepeatedExtglob in lib/parse.js skips, causing exponenti...