CVE-2004-0789-DDOS

sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

CVE-2023-44487-

CVE-2023-44487- 1- Installez Go. 2- Exécutez le serveur sur une machine séparée fichier server.go. 3- Exécutez le fichier main.go sur une machine séparée. Remarque : main.go contient le code d'attaque. 4. Spécifiez l'adresse IP de la cible. 5- Définissez le nombre de requêtes : exécutez main.go...

CVE-2025-31650

Apache Tomcat 10.1.39 - Déni de Service DoS Cet outil effectue une inondation asynchrone de requêtes HTTP/2 à haut volume en utilisant des en-têtes priority malformés pour tester la stabilité des serveurs Apache Tomcat fonctionnant avec les versions 10.1.10 à 10.1.39. ⚠️ Ceci est strictement à des...

CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 إثبات المفهوم للاستغلال نظرة عامة يحتوي هذا المستودع على سكربت يستغل ثغرة CVE-2023-22622 في ووردبريس، مما يتسبب في حجب الخدمة DoS عبر WP-Cron. يمكن استخدام هذا السكربت لإغراق موقع ووردبريس ضعيف بالطلبات، مما قد يؤدي إلى زيادة تحميل الخادم. تفاصيل الاستغلال عنوان...

HttpStrike

HttpStrike A fast DDoS script written in Python, it will send a lot of get requests if you increase the requests however you please...

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

CVE-2026-86452

MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...

AZL-99384 CVE-2026-78662 affecting package telegraf for versions less than 1.31.0-33

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

EUVD-2026-70266

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

GO-2026-6354 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2024-10085

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...

DEBIAN-CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...

EUVD-2026-38171

Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/ endpoint that allows unauthenticated attackers to trigger consistent 500 errors. Remote attackers can send OPTIONS requests to bypass authentication middleware and invoke tusProxy logic with invalid...

CVE-2026-29606

OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFreeTierLoopbackBypass option is explicitly enabled. An external attacker can send forged requests to the publicly...

CVE-2026-29606: Missing Authentication for Critical Function

OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFreeTierLoopbackBypass option is explicitly enabled. An external attacker can send forged requests to the publicly...

PT-2026-22435

Summary A Twilio webhook signature-verification bypass in the voice-call extension could allow unauthenticated webhook requests when a specific ngrok free-tier compatibility option is enabled. Impact This issue is limited to configurations that explicitly enable and expose the voice-call webhook...

PT-2026-6389

Summary A Denial of Service DoS vulnerability allows an unauthenticated attacker to crash the SignalK Server by flooding the access request endpoint /signalk/v1/access/requests. This causes a "JavaScript heap out of memory" error due to unbounded in-memory storage of request objects. Details The...

EUVD-2024-45395

Malicious code in bioql PyPI...

CVE-2020-9487

In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token one-time password mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens,...