tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

CVE-2026-19500-poc

CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

sprig-mvc-demo-patch

sprig-mvc-demo-patch This demo application partially covers the vulnerability CVE-2024-38828 Spring Framework中的漏洞CVE-2024-38828允许通过向接受byte类型参数的Spring MVC控制器发送大型或特制请求，发起拒绝服务（DoS）攻击。这可能导致内存、CPU过载，并因资源不足而使应用程序崩溃。 在我的演示应用中，我使用自定义转换器来覆盖与上传大文件相关的漏洞。...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

WaSonar

免责声明 ：本工具仅用于教育目的和安全研究。开发者不对滥用行为负责。请负责任且合乎道德地使用。 WaSonar 是一个强大的 CLI 工具，专用于 WhatsApp 协议上的教育研究、设备追踪和压力测试。基于 Baileys 构建。 功能 • 安装 • 用法 功能 实时设备追踪 ：检测所有绑定设备（手机、网页、桌面）的精确在线/离线状态。 设备发现 ：列出目标号码绑定的所有设备（主手机 + 附属设备）。 资料提取 ：获取个人资料图片、状态/简介信息及 JID。 资源耗尽 ：使用超大反应负载（激进/缓慢模式）淹没设备。 安装 通过 NPM（推荐） npm install -g...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

CVE-2025-12748

CVE-2025-12748 Eng Rus Créditos: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Incidencias: 687, 825 English Descripción Se descubrió un problema en el procedimiento de procesamiento de archivos XML. El procesamiento del contenido del archivo se realiza antes de la comprobación de ACL. Es...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

跨路由器隐蔽信道的特征化与检测 本仓库包含论文《跨路由器隐蔽信道的特征化与检测》中使用的源代码。如需访问论文，请前往 Oren 博士的实验室网站：orenlab。 论文中使用的完整数据可通过此链接访问。 攻击 论文提出了两种网络时序隐蔽信道，它们打破了由单个共享路由器托管的两个网络之间的逻辑隔离：CRCC 和 Wi-Fi 微干扰攻击。 通过使用这些隐蔽信道，我们能够在两个网络之间泄露信息，即使显式通信已被阻断。 两种攻击都会根据泄露的信息比特故意耗尽路由器的物理资源。通过这样做，宿主网络中的机器可以向客户网络中定期测量路由器响应时间的机器传递信息。正常响应时间与 '0'...

CVE-2026-102144

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service...

CVE-2026-102996

A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted PDF document with an oversized font character width array. When processing the document during operations such as text extraction, the library allocates excessive...

CVE-2026-101881

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause...

CVE-2026-102144 Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service...

CVE-2026-102144 Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service...

CVE-2026-102144

The Kiteworks Email Protection Gateway is vulnerable to a resource exhaustion flaw. An unauthenticated remote attacker can repeatedly trigger a comparatively expensive server-side operation, resulting in a partial denial of service . No specific exploit information or remediation details are prov...

EUVD-2026-90268

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service...

http-stalling-detector

Detector de estancamiento HTTP Los ataques DoS por estancamiento HTTP aprovechan la incapacidad de los servidores web para determinar si un cliente remoto simplemente está conectado a través de un enlace lento o si el cliente remoto está enviando datos deliberadamente muy despacio para evitar que...

CVE-2026-100071

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking subsystem. When device initialization fails after network receive handlers have already been registered, frames received during this setup window can create dynamic node entries that are not properly...

Security Bulletin: Vulnerabilities in netty-codec-http,spring-core,brace-expandsion,netty-transport,log4j-core,spring-expression,js-cookie,spring-security,spring-cloud,spring-boot,spring-hateoas might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in netty-codec-http,spring-core,brace-expandsion,netty-transport,log4j-core,spring-expression,js-cookie,spring-security,spring-cloud,spring-boot,spring-hateoas. Vulnerabilities include resource exhaustion and...