CVE-2026-17463 IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-17463

IBM Db2 for Linux, UNIX, and Windows (including DB2 Connect Server) versions 11.5.0–11.5.9 and 12.1.0–12.1.5 are vulnerable to a denial of service caused by uncontrolled resource consumption (CWE-400). The CVSS 3.1 score is 6.5 (Medium) , requiring a remote authenticated attacker with low privile...

EUVD-2026-77784

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption...

Astra Linux – Vulnerability in Tomcat9

A vulnerability exists in Apache Tomcat related to uncontrolled resource consumption, caused by an allocation leak in the HTTP/2 backlog tracking when a stream is reset. This issue affects Apache Tomcat: versions from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, and from 9.0.39...

logrus-dos-poc

CVE-2025-65637: Vulnerabilidad de Denegación de Servicio en Logrus Este directorio contiene código de prueba de concepto y scripts de prueba para la vulnerabilidad de Denegación de Servicio DoS en github.com/sirupsen/logrus, registrada como CVE-2025-65637. Resumen de la Vulnerabilidad CVE ID :...

Important: openssl11

Issue Overview: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a...

CVE-2026-90582

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

EUVD-2026-77072

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582 evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582

evanchiu serverless-todo (versions 1.0.3 and 2.0.0) is affected by a remote resource exhaustion vulnerability in the saveTodos function of src/index.js (API Todo Endpoint). An attacker can manipulate the event.body argument to trigger excessive resource consumption, leading to availability degrad...

CVE-2026-90582 evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

CVE-2021-35492

Información del Exploit Título del Exploit: Wowza Streaming Engine 4.8.11+5 - Denegación de Servicio CVE: CVE-2021-35492 Fecha: 2021-10-06 Autor del Exploit: N4nj0 Enlace del Software: https://www.wowza.com/products/streaming-engine Versión: 4.8.11+5 Probado en: Wowza Streaming Engine = 4.8.11+5...

Linux Distros Unpatched Vulnerability : CVE-2026-57227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - mqtt: unbounded number of messages per tx CVE-2026-57227 Note that Nessus relies on the presence of the package as...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

CVE-2026-9338

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

SUSE-SU-2026:4113-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...