mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

CVE-2022-23884

CVE-2022-23884 There is a network-layer vulnerabilities in the official server of Minecraft: Bedrock Edition aka Bedrock Server,which allow attacker to launch a DoS attack. CVE-2022-23884 Mojang Bedrock Dedicated Server 1.16.0-1.18.12 is affected by an large loop and crash server caused by...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

EUVD-2026-63090

LiquidJS: Uncontrolled Resource Consumption in join filter allows template authors to bypass memoryLimit and crash the process...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

RDL-detect

Remote Desktop Licensing Service Detection Reference https://github.com/fortra/impacket/blob/master/examples/rpcdump.py Enumerate open services via MSRPC, and determine whether Terminal Server Licensing is included based on UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d Usage: python3 rdl-detect.py 目...

CVE-2026-55256

This vulnerability affects Android , specifically the parsePartHeaders function across multiple files. The root cause is improper input validation , which can lead to a persistent remote denial of service . Exploitation requires no additional execution privileges and no user interaction. The issu...

EUVD-2026-74002

In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

CVE-2026-28633 is a High -severity vulnerability in the Android system component VoiceInteractionManagerService.java , specifically in the initForUserNoTracing method. The root cause is a possible persistent denial of service due to resource exhaustion , leading to local DoS with no additional ex...

CVE-2026-28596

CVE-2026-28596 is a permanent denial-of-service vulnerability in the parseInterventionFromXml method of GameManagerService.java within the Android platform. The root cause is resource exhaustion , which can lead to a local DoS condition requiring no additional execution privileges and no user int...

EUVD-2026-73952

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-31747

root@kitploit: Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: Versions = wmic service get...

CVE-2002-0201

CVE-2002-0201 Cyberstop Web Server para Windows 0.1 permite a atacantes remotos causar una denegación de servicio caída y posiblemente ejecutar código arbitrario mediante una solicitud HTTP GET larga, posiblemente desencadenando un desbordamiento de búfer. Publicación en Exploit-db en...

apache-vulnerability-testing

Herramienta de Prueba de Vulnerabilidades del Servidor Apache HTTP Este repositorio proporciona una Prueba de Concepto PoC para probar diversas vulnerabilidades en el Servidor Apache HTTP, incluyendo Ataques de Confusión de Nombres de Archivo, SSRF, Denegación de Servicio y otras relacionadas con...

sockstress

sockstress Sockstress CVE-2008-4609 implementation using Go Install root@kitploit: go get github.com/marcelki/sockstress Usage root@kitploit: Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose...