The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-90582

evanchiu serverless-todo (versions 1.0.3 and 2.0.0) is affected by a remote resource exhaustion vulnerability in the saveTodos function of src/index.js (API Todo Endpoint). An attacker can manipulate the event.body argument to trigger excessive resource consumption, leading to availability degrad...

EUVD-2026-77072

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2019-16889-poc

Consumo de recursos DoS en Edgemax v1.10.6 Denegación de servicio por consumo de recursos. Esto fue reportado el año pasado y ha sido corregido a partir de la versión 2.0.3. Se le ha asignado el CVE-2019-16889. Esta es la primera vez que uso asyncio, ¡si ves una forma más eficiente de hacer esto,...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

CVE-2021-35492

Exploit Information Exploit Title: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 Date: 2021-10-06 Exploit Author: N4nj0 Software Link: https://www.wowza.com/products/streaming-engine Version: 4.8.11+5 Tested on: Wowza Streaming Engine = 4.8.11+5 Vulnerability Advisory:...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

CVE-2026-38361

CVE-2026-38361: Múltiples vulnerabilidades de DoS no autenticadas en dash-uploader...

CVE-2026-31899

CVE-2026-31899: DoS exponencial mediante amplificación recursiva del elemento en CairoSVG Palabras clave: CVE-2026-31899, CairoSVG, DoS exponencial, bomba SVG, elemento use recursivo, denegación de servicio, amplificación XML, vulnerabilidad SVG en Python, CWE-400, consumo descontrolado de...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 Denegación de Servicio por Agotamiento del Pool de Conexiones de Base de Datos en ≤ 1.2.10 📌 Resumen Este repositorio documenta mi descubrimiento y divulgación responsable de CVE-2026-23842 , una vulnerabilidad de Denegación de Servicio de Alta Severidad en ChatterBot. Aviso de...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

CVE-2026-50787

CVE-2026-50787 — Consumo Descontrolado de Recursos en e-SIC Livre Resumen Existe una vulnerabilidad de consumo de recursos en el componente de generación de CAPTCHA de e-SIC Livre esiclivre. El endpoint vulnerable acepta parámetros controlados por el usuario que definen las dimensiones de la imag...

CVE-2026-36958

CVE-2026-36958: Denegación de Servicio mediante Solicitudes HTTP Concurrentes ID CVE: CVE-2026-36958 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-400 - Consumo de Recursos No Controlado Descripción El firmware V1.0...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...

UBUNTU-CVE-2026-82075

An uncontrolled resource consumption weakness exists in the request-ha...

Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)

The version of Kibana installed on the remote host is 8.x prior to 8.19.17, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-31 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...