2513 matches found
CVE-2025-3500-Poc
Lab: CVE-2025-3500 - Integer Overflow in Avast Antivirus Privilege Escalation Download Download Lab ZIP : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 Overview This repository provides a lab environment for researching CVE-2025-3500, an integer...
CLEANSTART-2026-SE28316 Allocation of resources without limits or throttling in ASP
Security vulnerability affects the azure-functions-host package. Allocation of resources without limits or throttling in ASP...
cve
CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...
CVE-2026-116120
A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out...
EUVD-2026-109613
A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out...
CVE-2026-116120 NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources
A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out...
CVE-2026-116120
A vulnerability exists in NocoDB versions up to 2026.07.0 within the PublicApiLimiterGuard component. Specifically, the function UserRefreshToken.deleteAllUserToken in the /auth/user/signup file can be manipulated to cause an allocation of resources (CWE-770, CWE-400). This remote attack is chara...
dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-115398
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...
CVE-2026-115397
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...
CVE-2026-115395
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space...
CVE-2026-115391
Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams, causi...
CVE-2026-115398 Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...
CVE-2026-115398 Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...
EUVD-2026-108334
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...
CVE-2026-115398
Ghidra versions prior to 12.2 are susceptible to a Denial of Service vulnerability caused by resource allocation without limits in the FileSystemIndexHelper component. This component, utilized by TarFileSystem and ZipFileSystem , fails to restrict the number of archive entries it stores. An attac...
CVE-2026-115397 Ghidra before 12.2 Denial of Service via Extension Archive Install
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...
EUVD-2026-108333
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...
CVE-2026-115397
Ghidra versions before 12.2 are vulnerable to a resource allocation flaw in the ExtensionUtils.unzipToInstallationFolder() function. The component fails to limit the file count when extracting entries from extension ZIP archives. An attacker could trick a user into installing a crafted archive co...