CVE-2004-0789-DDOS

sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

CVE-2023-44487-

CVE-2023-44487- 1- Goをインストールします。 2- 別のマシンでサーバーを実行します（server.goファイル）。 3- 別のマシンでmain.goファイルを実行します。注：main.goには攻撃コードが含まれています。 4. ターゲットのIPアドレスを指定します。 5- リクエスト数を指定します：main.go -requests 5000 を実行します。...

CVE-2025-31650

Apache Tomcat 10.1.39 - サービス拒否 DoS このツールは、不正な priority ヘッダーを使用した大規模な非同期HTTP/2リクエストフラッドを実行して、バージョン10.1.10から10.1.39までを実行しているApache Tomcatサーバーの安定性をテストします。 ⚠️ これは厳密に教育および研究目的 のみです。 ❌ 著者は、違法または無許可の使用について一切責任を負いません 。 🧰 機能 ランダム化された不正なHTTP/2 priority ヘッダーを送信 マルチスレッド非同期アーキテクチャ httpx リアルタイムの可用性監視...

CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 エクスプロイト PoC 概要 このリポジトリには、WordPress の CVE-2023-22622 脆弱性を悪用し、WP-Cron を介してサービス拒否 DoS を引き起こすスクリプトが含まれています。このスクリプトを使用して、脆弱な WordPress サイトに大量のリクエストを送信し、サーバー過負荷を引き起こす可能性があります。 エクスプロイトの詳細 エクスプロイトタイトル: DoS WP-Cron - CVE-2023-22622 日付: 07/29/2024 エクスプロイト作成者: Michael Fry...

HttpStrike

HttpStrike A fast DDoS script written in Python, it will send a lot of get requests if you increase the requests however you please...

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

CVE-2026-86452

MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

AZL-99384 CVE-2026-78662 affecting package telegraf for versions less than 1.31.0-33

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

EUVD-2026-70266

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

GO-2026-6354 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2024-10085

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...

DEBIAN-CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

EUVD-2026-38171

Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/ endpoint that allows unauthenticated attackers to trigger consistent 500 errors. Remote attackers can send OPTIONS requests to bypass authentication middleware and invoke tusProxy logic with invalid...

CVE-2026-29606

OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFreeTierLoopbackBypass option is explicitly enabled. An external attacker can send forged requests to the publicly...

CVE-2026-29606: Missing Authentication for Critical Function

OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFreeTierLoopbackBypass option is explicitly enabled. An external attacker can send forged requests to the publicly...

PT-2026-22435

Summary A Twilio webhook signature-verification bypass in the voice-call extension could allow unauthenticated webhook requests when a specific ngrok free-tier compatibility option is enabled. Impact This issue is limited to configurations that explicitly enable and expose the voice-call webhook...

PT-2026-6389

Summary A Denial of Service DoS vulnerability allows an unauthenticated attacker to crash the SignalK Server by flooding the access request endpoint /signalk/v1/access/requests. This causes a "JavaScript heap out of memory" error due to unbounded in-memory storage of request objects. Details The...

EUVD-2024-45395

Malicious code in bioql PyPI...

CVE-2020-9487

In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token one-time password mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens,...