CVE_2023_44487-Rapid_Reset

CVE-2023-44487 Herramienta de Prueba de Restablecimiento Rápido HTTP/2 - Edición Mejorada Una herramienta de prueba integral en Python para CVE-2023-44487 , la vulnerabilidad de Restablecimiento Rápido HTTP/2. Este repositorio contiene tanto herramientas de prueba de ataque como de verificación. ...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

Characterization and Detection of Cross-Router Covert Channels This repository contains the source code used in the paper "Characterization and Detection of Cross-Router Covert Channels". To access the paper, go to Dr. Oren's laboratory website: orenlab. The full data used in the paper is...

CVE-2026-68904

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-opcua clients using the default keepSessionAlive setting can enter a repeated reconnection cycle when an OPC UA server's clock skew causes BadInvalidTimestamp responses...

NPM: node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

Resource Exhaustion vulnerability discovered by ? in WordPress Npm node-opcua-transport versions = 2.0.0, 2.170.0...

NPM: node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

Resource Exhaustion vulnerability discovered by ? in WordPress Npm node-opcua-client versions = 2.0.0, 2.170.0...

NPM: node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

Resource Exhaustion vulnerability discovered by ? in WordPress Npm node-opcua versions = 2.0.0, 2.170.0...

CVE-2026-68904

node-opcua (an OPC UA implementation for TypeScript/Node.js) versions 2.0.0 through 2.170.0 are affected by a TCP socket leak caused by a keepalive reconnection cycle. When an OPC UA server's clock skew produces BadInvalidTimestamp responses, ClientSessionKeepAliveManager._ping_server misclassifi...

EUVD-2026-80869

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-opcua clients using the default keepSessionAlive setting can enter a repeated reconnection cycle when an OPC UA server's clock skew causes BadInvalidTimestamp responses...

CVE-2026-68904 node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-opcua clients using the default keepSessionAlive setting can enter a repeated reconnection cycle when an OPC UA server's clock skew causes BadInvalidTimestamp responses...

CVE-2026-81563

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This...

CVE-2026-19668

CVE-2026-19668 affects BIND 9 recursive resolvers that may suffer excessive resource consumption when processing large numbers of a particular kind of invalid DNSSEC record, leading to potential denial of service. The vulnerability stems from DNSSEC cryptographic material matching and is mitigate...

CVE-2026-19668 Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching

A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate the exposure. This issue affects BIND 9 versions 9.11.0 through...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

CVE-2026-81563 SVCB AliasMode additional-data error leaks qpcache references

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This...

EUVD-2026-80770

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This...

CVE-2024-42849

CVE-2024-42849 Un problema en Silverpeas v.6.4.2 y versiones anteriores permite a un atacante remoto provocar una denegación de servicio mediante la función de cambio de contraseña. Informe Si se intercepta la solicitud de cambio de contraseña y se suministra una cadena suficientemente larga 1MB...

WaSonar

Aviso : Esta herramienta es únicamente para fines educativos e investigación en seguridad. Los desarrolladores no se responsabilizan por su mal uso. Úsala de manera responsable y ética. WaSonar es una potente herramienta CLI diseñada para investigación educativa, seguimiento de dispositivos y...