CVE-2026-90584

A flaw was found in TooTallNate Java-WebSocket. A remote attacker can exploit a weakness in the processFrameContinuousAndNonFin function within the Fragmentation Handler component. This vulnerability allows for excessive allocation of resources, which can lead to a Denial of Service DoS condition...

CVE-2026-90584

A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be perform...

CVE-2026-90584

TooTallNate Java-WebSocket versions up to 1.6.1 are affected by a resource allocation flaw in the Fragmentation Handler , specifically the processFrameContinuousAndNonFin function in Draft_6455.java. A remote attacker with no authentication can trigger the weakness, resulting in low availability ...

PT-2026-90968

A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft 6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be...

cve

CVE 问题描述：Stackoverflow 我正尝试在 Docker 中构建项目，因此使用 Docker Desktop 来构建我的项目。在构建镜像时，我遇到了以下漏洞之一： root@kitploit: CVE-2024-26308 CWE-770 7.5 H Apache Commons Compress 中存在无限制或节流资源分配漏洞。该问题影响 Apache Commons Compress 1.21 至 1.26 之前版本。建议用户升级到修复该问题的 1.26 版本。 CVSS 评分：7.5 CVSS...

CVE-2025-3500-Poc

Lab: CVE-2025-3500 - Avast Antivirus 整数溢出权限提升漏洞 下载 下载实验 ZIP：https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 概述 本仓库提供了一个用于研究 CVE-2025-3500 的实验环境，该漏洞是 Windows 平台上 Avast Antivirus 25.1.981.6...

CVE-2026-57099

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

CVE-2026-72978

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-69374

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-57099

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-73886

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-57099

ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...

EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

EUVD-2026-73251

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-72978

CVE-2026-72978 is a Medium severity (CVSS 5.9) denial-of-service vulnerability in Active Directory Federation Services (AD FS) . The root cause is allocation of resources without limits or throttling , allowing an unauthorized, unauthenticated attacker to cause a remote denial of service . The at...

CVE-2026-48888

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888 WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...

CVE-2026-48888

CVE-2026-48888 affects the WooCommerce WordPress plugin by Automattic , versions before 11.1.0 . The vulnerability is classified as Allocation of Resources Without Limits or Throttling , enabling an unauthenticated attacker to trigger an HTTP Denial of Service over the network with low complexity...