CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Security Researcher: Jacob Archuleta @nullze 📝 Vulnerability Overview A critical Denial of Service DoS vulnerability was discovered in the Tesla Model 3, Model S, and Model X all versions prior to 2020.4.10. This vulnerability allowed a remo...

CVE-2024-42849

CVE-2024-42849 An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function. Writeup If the password change request is intercepted and a sufficiently long1MB string is supplied as the password to use, system resources will be...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-vulnerability-POC- CVE-2025-8671 vulnerability POC CVE-2025-8671 Vulnerability Scanner A professional security research tool for detecting the MadeYouReset vulnerability CVE-2025-8671 in HTTP/2 servers. This scanner uses multiple detection heuristics to identify servers vulnerable t...

CVE-2026-81699

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-74735

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol implementation. A local user could trigger a reference count leak by closing specific /proc or /sys files related to L2TP tunnels and sessions before fully reading their content. This could lead to resource exhaustion,...

CVE-2025-56223

CVE-2025-56223 Denial of Service – Upload Document API Description An attacker can rapidly upload a large volume of files to cause denial of service. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Nadi...

CVE-2026-47881

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-80554

A flaw was found in the Linux kernel's s390/vfioccw component. The vfio-ccw logic processes channel programs recursively, breaking them into segments when a Transfer-In-Channel TIC Channel Command Word CCW is encountered. An attacker could exploit the lack of a proper limit on these segments,...

EUVD-2026-66844

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + 环境 原理： 来自服务端启用 JSON body插件的JSON 填充（"JSON填充"是Struts 2中JSON插件提供的一项核心功能，可以简单地理解为一种自动的数据转换机制。） JSON 填充功能的解析器在处理JSON数组时，一次性把所有的请求体的json内容读取到内存（逐项装载） 造成内存消耗（和cpu消耗） 测试 我使用wsl2和tomcat部署Struts应用，做了一个登录页面，用户名admin 密码123456...

CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay DoS durch unbegrenztes Speicherwachstum Proof of Concept für eine Ressourcenerschöpfungs-Schwachstelle im H.264-RTP-Depayloader von GStreamer rtph264depay. Das gleiche Muster betrifft auch rtph265depay. Was es ist Während der Reassemblierung fragmentierter...

http-stalling-detector

HTTP Stalling Detector Ataques de DoS por estagnação HTTP HTTP stalling aproveitam a incapacidade dos servidores web de determinar se um cliente remoto está apenas conectado por um link lento ou se o cliente remoto está deliberadamente enviando dados muito lentamente para evitar que o servidor we...

CVE-2026-0897

CVE-2026-0897 — Google Keras: HDF5 Shape Bomb के माध्यम से सेवा अस्वीकार Denial of Service -orange?style=for-the-badge -brightgreen?style=for-the-badge अवलोकन...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

Charakterisierung und Erkennung von geräteübergreifenden verdeckten Kanälen zwischen Routern Dieses Repository enthält den Quellcode, der in der Arbeit "Characterization and Detection of Cross-Router Covert Channels" verwendet wurde. Um auf die Arbeit zuzugreifen, besuchen Sie die Website des...

jackson

Análise e Remediação de Vulnerabilidades de Segurança no Jackson core 2.13.5 CVE-2025-52999 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551 GHSA-2m67-wjpj-xhg9 SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Sonatype-2022-6438 Este branch...

WaSonar

Disclaimer : This tool is for educational purposes and security research only. The developers are not responsible for misuse. Please use responsibly and ethically. WaSonar is a powerful CLI tool designed for educational research, device tracking, and stress testing on the WhatsApp protocol. Built...

CVE-2013-5211

CVE-2013-5211 PoC Network Time Protocol Daemon ntpd comando monlist abilitato DoS Questo script Python è utilizzato per rilevare CVE-2013-5211, una vulnerabilità trovata nei server NTP Network Time Protocol. Utilizzando il comando ntpd monlist, questa vulnerabilità potrebbe consentire a un...

-CVE-2024-39614

Django 拒绝服务漏洞的概念验证 PoC 本仓库包含一个概念验证 PoC 脚本，用于演示 Django 5.0（5.0.7 之前版本）和 4.2（4.2.14 之前版本）中的拒绝服务 DoS 漏洞。该漏洞存在于 getsupportedlanguagevariant 函数中，在处理包含特定字符的超长字符串时容易受到潜在的 DoS 攻击。 目录 漏洞描述 设置与使用 PoC 脚本 重要注意事项 缓解措施 漏洞描述 CVE-ID ：（待定） 概述 ： Django 5.0（5.0.7 之前版本）和 4.2（4.2.14 之前版本）中的 getsupportedlanguagevarian...

CVE-2022-34169

Описание Проверяет, исправлена ли CVE-2022-34169 на вашей машине. Насколько мне известно, эксплойт был найден сотрудником Google и не опубликован. Поскольку исправление известно, был написан небольшой тестовый код для проверки наличия исправления во время выполнения. Сборка самостоятельно...

CVE-2025-61303

CVE-2025-61303 - RecordedFuture Triage: Negazione dell'Analisi tramite Forking Ricorsivo di Processi Descrizione RecordedFuture Triage Sandbox Windows 10 build 2004 e Windows 10 LTSC 2021 contiene una vulnerabilità critica nel proprio motore di analisi comportamentale di Windows che consente a un...