The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

logrus-dos-poc

CVE-2025-65637: Logrus Denial of Service Vulnerability This directory contains proof-of-concept code and test scripts for the Denial of Service DoS vulnerability in github.com/sirupsen/logrus, assigned as CVE-2025-65637. Vulnerability Summary CVE ID : CVE-2025-65637 CWE : CWE-400 Uncontrolled...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Tries to exploit a WordPress vulnerability CVE-2018-6389 which can be used to cause a Denial of Service. WARNING: This software does not perform DoS on vulnerable targets; it executes one HTTP GET call only to check if the vulnerability is present. This software is written ...

CVE-2021-35492

Exploit Information Exploit Title: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 Date: 2021-10-06 Exploit Author: N4nj0 Software Link: https://www.wowza.com/products/streaming-engine Version: 4.8.11+5 Tested on: Wowza Streaming Engine = 4.8.11+5 Vulnerability Advisory:...

CVE-2026-57227 Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

IBM DB2 DoS (7286983) (Unix)

According to its self-reported version number, IBM Db2 is affected by a denial of service vulnerability: - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due ...

CVE-2026-92879

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

CVE-2026-92879 vgmstream mus_acm.c parse_mus resource consumption

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

CVE-2026-92879

vgmstream (up to revision r2117) is affected by a security flaw in the parse_mus function within src/meta/mus_acm.c . The vulnerability allows a remote attacker to trigger excessive resource consumption through crafted input, resulting in a low availability impact with no confidentiality or integ...

EUVD-2026-81616

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

CVE-2026-38361

CVE-2026-38361: Multiple Unauthenticated DoS Vulnerabilities in dash-uploader...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 Denial of Service via Database Connection Pool Exhaustion in ≤ 1.2.10 📌 Overview This repository documents my discovery and responsible disclosure of CVE-2026-23842 , a High Severity Denial-of-Service vulnerability in ChatterBot. GitHub Advisory: GHSA-v4w8-49pv-mf72 CVE ID:...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

UBUNTU-CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

CVE-2026-76646 Apache MyFaces: Denial of Service via Unbounded Request Parsing

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

EUVD-2026-80956

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...