CLEANSTART-2026-JM55948 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...

The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the CrocoTime employee attendance system, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2026-104712

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

logrus-dos-poc

CVE-2025-65637: Logrus 서비스 거부 취약점 이 디렉토리는 github.com/sirupsen/logrus의 서비스 거부DoS 취약점에 대한 개념 증명 코드와 테스트 스크립트를 포함하며, CVE-2025-65637 로 할당되었습니다. 취약점 요약 CVE ID : CVE-2025-65637 CWE : CWE-400 통제되지 않은 리소스 소비 CVSS : 7.5 High 발견자 : Christopher Straight, Juan Pablo Mandelbaum 설명 Entry.Writer를 사용하여 개행 문자가 없는...

UBUNTU-CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced ...

CVE-2026-78844

요약 javadelight delight-nashorn-sandbox 0.5.5는 통제되지 않은 리소스 소비Uncontrolled Resource Consumption 취약점이 존재합니다. 이 샌드박스는 JavaScript 루프에 정적으로 인터럽트 검사를 주입하여 maxCPUTime 제한을 적용하지만, 동적 코드 평가를 비활성화하지 못합니다. 공격자는 이러한 함수를 사용하여 정적 새니타이저를 우회하는 무한 루프를 실행할 수 있습니다. 취약점 유형: 통제되지 않은 리소스 소비, 보호 메커니즘 실패 제품...

CVE-2019-16889-poc

Edgemax v1.10.6 리소스 소모 DOS 리소스 소모 서비스 거부. 작년에 보고되었으며 버전 2.0.3에서 수정되었습니다. CVE-2019-16889가 할당되었습니다. asyncio를 처음 사용해봅니다. 더 효율적인 방법이 있다면 알려주세요! 다음을 참조하세요: https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ 이 저장소에 requirements.txt 파일이 추가되었으므로 'pip3 install -r requirements.tx...

wordpress_cve-2018-6389

wordpresscve-2018-6389 서비스 거부Denial of Service를 유발하는 데 사용될 수 있는 WordPress 취약점CVE-2018-6389을 악용하려 시도합니다. 경고: 이 소프트웨어는 취약한 대상에 DoS를 수행하지 않습니다. 취약점이 존재하는지 확인하기 위해 HTTP GET 호출을 한 번만 실행합니다. 이 소프트웨어는 외부 종속성 없이 작성되었습니다. 면책 조항 이 도구는 보안 엔지니어와 AppSec 담당자가 보안 평가를 수행할 수 있도록 제작되었습니다. 이 도구를 책임감 있게 사용하시기 바랍니다...

CVE-2021-35492

エクスプロイト情報 エクスプロイトタイトル: Wowza Streaming Engine 4.8.11+5 - サービス拒否 CVE: CVE-2021-35492 日付: 2021-10-06 エクスプロイト作者: N4nj0 ソフトウェアリンク: https://www.wowza.com/products/streaming-engine バージョン: 4.8.11+5 テスト済み: Wowza Streaming Engine = 4.8.11+5 脆弱性アドバイザリ:...

Security Bulletin: Due to the use of jackson-databind, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-68497)

Summary Jackson-databind is used by IBM Sterling Control Center as part of dependency in jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by...

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...

Linux Distros Unpatched Vulnerability : CVE-2026-103880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP...

CVE-2026-94657

A flaw was found in Apache Thrift. A remote attacker could exploit improper resource allocation controls in the JavaME bindings to cause a Denial of Service DoS. By sending requests that trigger unbounded resource consumption, an attacker can exhaust system resources and make the service...

CVE-2026-104436

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

EUVD-2026-91446

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

CVE-2026-104436

Zebra versions before 4.5.0 are susceptible to an uncontrolled resource consumption vulnerability. Remote P2P peers can exhaust blocking-pool threads by transmitting oversized block locator vectors, specifically by sending getblocks or getheaders messages containing up to 65,535 locator hashes . ...

CVE-2026-104436 Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

EUVD-2026-91434

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...