XSpider PRO MaxPatrol VM Mobile Resource Consumption DoS

The vulnerability of XSpider PRO and the vulnerability management system MaxPatrol VM Mobile are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow remote attackers to cause service failures...

h2 library Resource Consumption DoS

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CrocoTime Employee Attendance DoS

The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (October 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-0636 DESCRIPTION: Improper neutralization of special elements used in a...

logrus-dos-poc

CVE-2025-65637: Logrus Denial of Service Vulnerability This directory contains proof-of-concept code and test scripts for the Denial of Service DoS vulnerability in github.com/sirupsen/logrus, assigned as CVE-2025-65637. Vulnerability Summary CVE ID : CVE-2025-65637 CWE : CWE-400 Uncontrolled...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

CVE-2026-38361

CVE-2026-38361: Multiple Unauthenticated DoS Vulnerabilities in dash-uploader Multiple unauthenticated Denial of Service DoS issues in fohrloop/dash-uploader Python, PyPI, including but not limited to Out-of-Memory OOM process crash, file truncation to zero bytes, permanent disk exhaustion, and...

CVE-2026-62974

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, a malformed but non-empty BACnet WriteProperty request can drive the official server demo into a non-terminating request-processing loop with repeated heap-backed side...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

CVE-2026-62974

The BACnet Stack C library for embedded systems contains a vulnerability where a malformed but non-empty BACnet WriteProperty request can trigger a non-terminating request-processing loop. Specifically, the issue occurs during the parsing of Life_Safety_Zone PROP_ZONE_MEMBERS within the official ...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

CVE-2026-126421

OpenEMR before 8.5.0 contains an uncontrolled resource consumption vulnerability that allows authenticated users with patients/med access to exhaust PHP workers via an unbounded count parameter. Attackers can send printlabels requests to labsajax.php with huge counts, forcing mPDF page and barcod...

CVE-2026-126303

NLTK before 3.10.4 contains an uncontrolled resource consumption vulnerability in SteppingRecursiveDescentParser.parse that lacks any maxtime deadline or step limit. Attackers influencing the grammar can supply an ambiguous self-embedding grammar and short token input to force unbounded top-down...

CVE-2026-50787

CVE-2026-50787 — Uncontrolled Resource Consumption in e-SIC Livre Summary A resource consumption vulnerability exists in the CAPTCHA generation component of e-SIC Livre esiclivre. The vulnerable endpoint accepts user-controlled parameters that define CAPTCHA image dimensions, font size, and the...

EUVD-2026-125249

NocoDB before 2026.09.0 contains an uncontrolled resource consumption vulnerability that allows authenticated users to bypass bulk row-count limits by using session authentication instead of API tokens. Attackers with Editor write permission on one table can submit hundreds of thousands of rows t...

CVE-2026-126272

NocoDB versions prior to 2026.09.0 are vulnerable to an uncontrolled resource consumption (CWE-770) flaw in the v1 and v2 bulk write routes . The vulnerability allows authenticated users with Editor write permission on a table to bypass bulk row-count limits by utilizing session authentication in...

CVE-2026-126303

The NLTK library before version 3.10.4 is vulnerable to an uncontrolled resource consumption (CWE-400) flaw in the SteppingRecursiveDescentParser.parse() function. The root cause is the lack of a max_time deadline or step limit, which allows an attacker who can influence the grammar to provide an...

CVE-2026-126303 NLTK before 3.10.4 Denial of Service via SteppingRecursiveDescentParser.parse()

NLTK before 3.10.4 contains an uncontrolled resource consumption vulnerability in SteppingRecursiveDescentParser.parse that lacks any maxtime deadline or step limit. Attackers influencing the grammar can supply an ambiguous self-embedding grammar and short token input to force unbounded top-down...

EUVD-2026-125218

NLTK before 3.10.4 contains an uncontrolled resource consumption vulnerability in SteppingRecursiveDescentParser.parse that lacks any maxtime deadline or step limit. Attackers influencing the grammar can supply an ambiguous self-embedding grammar and short token input to force unbounded top-down...

CVE-2026-126303 NLTK before 3.10.4 Denial of Service via SteppingRecursiveDescentParser.parse()

NLTK before 3.10.4 contains an uncontrolled resource consumption vulnerability in SteppingRecursiveDescentParser.parse that lacks any maxtime deadline or step limit. Attackers influencing the grammar can supply an ambiguous self-embedding grammar and short token input to force unbounded top-down...