The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 リソース消費によるサービス拒否。これは昨年報告され、バージョン 2.0.3 で修正されました。CVE-2019-16889 が割り当てられています。 これは私が初めて asyncio を使用したものです。もしより効率的な方法をご存知でしたら、お知らせください！ 以下を参照してください： https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ このリポジトリに requirements.txt...

wordpress_cve-2018-6389

wordpresscve-2018-6389 试图利用一个WordPress漏洞（CVE-2018-6389），该漏洞可用于导致拒绝服务。 警告： 本软件不会 对有漏洞的目标执行拒绝服务攻击；它仅执行一次HTTP GET请求来检查漏洞是否存在。 本软件编写时无外部依赖。 免责声明 此工具旨在供安全工程师和应用安全人员进行安全评估。请负责任地使用此工具。对于任何人对本应用程序的使用方式，我不承担任何责任。对于因使用此工具造成的任何损害或任何犯罪行为，我概不负责。 漏洞信息 CVE-ID : CVE-2018-6389 Link :...

CVE-2021-35492

漏洞信息 漏洞标题： Wowza Streaming Engine 4.8.11+5 - 拒绝服务 CVE： CVE-2021-35492 日期： 2021-10-06 漏洞作者： N4nj0 软件链接： https://www.wowza.com/products/streaming-engine 版本： 4.8.11+5 测试环境： Wowza Streaming Engine = 4.8.11+5 漏洞公告： https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ TWowza Streaming Engine（原名...

CVE-2026-57227 Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

IBM DB2 DoS (7286983) (Unix)

According to its self-reported version number, IBM Db2 is affected by a denial of service vulnerability: - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due ...

CVE-2026-92879

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

CVE-2026-92879

vgmstream (up to revision r2117) is affected by a security flaw in the parse_mus function within src/meta/mus_acm.c . The vulnerability allows a remote attacker to trigger excessive resource consumption through crafted input, resulting in a low availability impact with no confidentiality or integ...

CVE-2026-92879 vgmstream mus_acm.c parse_mus resource consumption

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

EUVD-2026-81616

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parsemus of the file src/meta/musacm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applyin...

CVE-2026-38361

CVE-2026-38361：dash-uploader 中多个未经认证的拒绝服务漏洞 fohrloop/dash-uploader（Python，PyPI）中存在多个未经认证的拒绝服务（DoS）问题，包括但不限于：内存溢出（OOM）导致进程崩溃、文件截断为零字节、永久性磁盘耗尽，以及完全绕过文档中声明的 maxfilesize 限制。通过同一组未经清理的参数，还存在其他资源滥用路径。 ⚠️ 无补丁可用，且永远不会发布补丁 该仓库已于 2025-07-19 归档，无活跃维护者。所有已发布版本（0.1.0 至 0.7.0a2）均受影响且将持续受影响。该包每月仍有约 28,000 次下载。...

CVE-2026-31899

CVE-2026-31899：CairoSVG 中通过递归 元素放大导致的指数级拒绝服务 关键词: CVE-2026-31899, CairoSVG, 指数级 DoS, SVG 炸弹, 递归 use 元素, 拒绝服务, XML 放大, Python SVG 漏洞, CWE-400, 不受控制的资源消耗, SVG 亿万笑 目录 概述 漏洞详情 技术分析 概念验证 影响 修复措施 CVSS v3.1 指标 参考 联系方式 概述 CairoSVG 指数级拒绝服务 CVE-2026-31899 — 一个 1,411 字节的 SVG 载荷通过递归 元素放大，使 CPU 无限期保持在 100% 占用...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 通过数据库连接池耗尽导致的拒绝服务（影响版本 ≤ 1.2.10） 📌 概述 本仓库记录了我对 ChatterBot 中高危拒绝服务漏洞 CVE-2026-23842 的发现和负责任披露过程。 GitHub 安全公告：GHSA-v4w8-49pv-mf72 CVE 编号：CVE-2026-23842 CWE：CWE-400（未受控制的资源消耗） 严重性：高危（7.5 / 10） CVSS：3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 🚨 漏洞摘要 ChatterBot 版本 ≤ 1.2.10...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI コードフォーマット DoS ラボ このリポジトリには、CVE-2024-12537（Open WebUI のコードフォーマットエンドポイントにおける認証不要のサービス拒否脆弱性）のローカルでの独立した再現ラボと nuclei テンプレート案が含まれています。 ラボは大規模なサービス拒否ペイロードを送信しません。認証不要の /api/version フィンガープリントエンドポイントと、"code":"x" の最小限のリクエストを /api/v1/utils/code/format に送信することで nuclei...

CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

UBUNTU-CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

EUVD-2026-80956

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

CVE-2026-76646 Apache MyFaces: Denial of Service via Unbounded Request Parsing

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

CVE-2026-76646

Apache MyFaces is vulnerable to a denial of service via unbounded request parsing . A remote, unauthenticated attacker can supply specially crafted request parameters to cause excessive resource consumption, leading to a DoS condition. The CVSS 3.1 score is 7.5 (HIGH) , with high availability imp...