6493 matches found
The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
DoS-Braces-3.03
CVE-Candidate: Denial of Service in braces via Comma-Separated Brace Expansion Package: braces npm Version: 3.0.3 latest Severity: HIGH CVSS 7.5 CWE: CWE-400 Uncontrolled Resource Consumption Status: Unreported Note: This is an independent finding. CVE-2024-4068 addressed input length limiting...
CVE-2019-16889-poc
Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...
CVE-2026-38361
CVE-2026-38361: Multiple Unauthenticated DoS Vulnerabilities in dash-uploader...
CVE-2026-31899
CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...
POC_CVE-2024-12537
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...
wordpress_cve-2018-6389
wordpresscve-2018-6389 Tries to exploit a WordPress vulnerability CVE-2018-6389 which can be used to cause a Denial of Service. WARNING: This software does not perform DoS on vulnerable targets; it executes one HTTP GET call only to check if the vulnerability is present. This software is written ...
logrus-dos-poc
CVE-2025-65637: Vulnerabilità Denial of Service in Logrus Questa directory contiene codice proof-of-concept e script di test per la vulnerabilità Denial of Service DoS in github.com/sirupsen/logrus, assegnata come CVE-2025-65637. Riepilogo della Vulnerabilità CVE ID : CVE-2025-65637 CWE : CWE-400...
CVE-2021-35492
Informazioni sull'exploit Titolo dell'exploit: Wowza Streaming Engine 4.8.11+5 - Negazione del servizio CVE: CVE-2021-35492 Data: 2021-10-06 Autore dell'exploit: N4nj0 Link del software: https://www.wowza.com/products/streaming-engine Versione: 4.8.11+5 Testato su: Wowza Streaming Engine = 4.8.11...
CVE-2026-50787
CVE-2026-50787 — Consumo Descontrolado de Recursos no e-SIC Livre Resumo Existe uma vulnerabilidade de consumo de recursos no componente de geração de CAPTCHA do e-SIC Livre esiclivre. O endpoint vulnerável aceita parâmetros controlados pelo usuário que definem as dimensões da imagem CAPTCHA, o...
CVE-2026-36958
CVE-2026-36958: Denial of Service tramite Richieste HTTP Concorrenti CVE ID: CVE-2026-36958 Data: 2026-04-29 Scopritore: Kirubel Solomne Vendor: U-SPEED Prodotto: Router U-SPEED Versione Firmware: V1.0.0 CWE: CWE-400 - Consumo di Risorse Non Controllato Descrizione Il firmware V1.0.0 del Router...
CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10
CVE-2026-23842 Negação de Serviço via Exaustão do Pool de Conexões do Banco de Dados em ≤ 1.2.10 📌 Visão Geral Este repositório documenta minha descoberta e divulgação responsável da CVE-2026-23842 , uma vulnerabilidade de Negação de Serviço de Alta Severidade no ChatterBot. Aviso do GitHub:...
CVE-2026-68763
Uncontrolled Resource Consumption vulnerability in Apache Tomcatvia an...
CVE-2026-62326 Weblate Has Uncontrolled Resource Consumption via
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...
EUVD-2026-66190
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python2 (UTSA-2026-093150)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093150 advisory. Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb. Tenable has extracted the preceding...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...
CVE-2026-68763
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...
CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...
CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were...