WaSonar

Aviso : Esta herramienta es únicamente para fines educativos e investigación en seguridad. Los desarrolladores no se responsabilizan por su mal uso. Úsala de manera responsable y ética. WaSonar es una potente herramienta CLI diseñada para investigación educativa, seguimiento de dispositivos y...

http-stalling-detector

Detector de estancamiento HTTP Los ataques DoS por estancamiento HTTP aprovechan la incapacidad de los servidores web para determinar si un cliente remoto simplemente está conectado a través de un enlace lento o si el cliente remoto está enviando datos deliberadamente muy despacio para evitar que...

wordpress_DoS

WordPress 4.9.8 存在拒绝服务攻击漏洞。 附加信息 我们发现 WordPress 版本 4.9.8 存在拒绝服务 DoS 漏洞。未经身份验证的远程用户可以对易受攻击的页面执行一系列请求，导致服务器上的处理、交换和磁盘 I/O 增加。这种处理增加使得 Web 应用程序不可用。 https://127.0.0.1/wp-admin/install.php 漏洞类型 拒绝服务 DoS 产品供应商 WordPress 研究人员 Guilherme Rubert - XLabs Security 受影响产品代码库 WordPress v. 4.9.8 参考...

CVE-2025-63914

CVE-2025-63914 CVE-2025-63914 的公开披露与补丁：Cinnamon/kotaemon 中的 ZIP 炸弹漏洞。 致谢 Wang Yuanrong 摘要 mayextractzip 函数未对 ZIP 解压缩施加限制，使恶意的 ZIP 炸弹能够触发过多的资源消耗并导致拒绝服务。 详情 \libs\ktem\ktem\index\file\ui.py 文件中的 mayextractzip 函数未检查上传 ZIP 文件的内容。尽管这些内容会被解压到一个临时文件夹中（该文件夹在每次解压前会清空），但成功上传一个 ZIP...

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 Load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. $ chmod +x Execute.sh $ ./Execute.sh How it Works! The problem lies upon the load-scripts.php file, which purpose is to retrieve several Javascript packag...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

Caracterización y Detección de Canales Encubiertos entre Enrutadores Este repositorio contiene el código fuente utilizado en el artículo "Characterization and Detection of Cross-Router Covert Channels". Para acceder al artículo, visite el sitio web del laboratorio del Dr. Oren: orenlab. Los datos...

CVE-2025-8352 Denial-of-service vulnerability in ESET PROTECT On-Prem

Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption CPU and RAM, leading to conditions for a Denial-of-Service attack...

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...

Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Storage Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1 power and IBM Cloud Pak System 2.3.6.2 intel. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven networ...

CVE-2026-59941

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2024-20481)

A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3196)

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust memory resources on the affected device, leading to a...

CVE-2020-10558

CVE-2020-10558: Denegación de Servicio DoS en Tesla Model S/3/X Investigador de seguridad: Jacob Archuleta @nullze 📝 Resumen de la vulnerabilidad Se descubrió una vulnerabilidad crítica de Denegación de Servicio DoS en los Tesla Model 3, Model S y Model X todas las versiones anteriores a 2020.4.1...

CVE-2026-90187

A flaw was found in the nullblk module of the Linux kernel. When a zoned nullblk device is powered off and then on again, the memory allocated for device zones is not properly freed. This oversight causes a memory leak with each power cycle, which could lead to resource exhaustion over time...

CVE-2026-90434

A flaw was found in the Linux kernel's isofs filesystem driver. When processing compressed block pointer tables via the zisofsfillpages function, a memory resource is not properly released upon successful operation. A local attacker could potentially exploit this resource mismanagement, possibly ...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-90188

A flaw was found in the Linux kernel's nullblk module. When sharedtags is enabled and device creation fails after allocating a global tag set, the global tag set is not properly freed. This oversight leads to a permanent memory leak, which could potentially result in a Denial of Service DoS due t...