645607 matches found
sricam-gsoap2.8-dos-exploit
sricam-gsoap2.8-dos-exploit Sricam gSOAP2.8 DoS 漏洞利用概念验证 概念验证代码：SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 感谢 CVE 分配团队协助整理以下内容： 描述 Sricam IP 网络摄像机容易受到通过多个不完整 HTTP 请求引发的拒绝服务攻击，因为其 Web 服务器（基于 gSOAP 2.8.x）配置为迭代排队方式（即非线程化操作），超时时间长达数秒。 附加信息 Sricam IP...
DEBIAN-CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding th...
CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding th...
CVE-2026-58073-check
Veeam Service Provider Console 代理模拟 — 补丁状态检测脚本 这是一个安全、无需认证的检测器，用于检测 KB4893 中描述的 Veeam Service Provider Console 漏洞（发布于 2026-08-04）。它针对每个目标只回答一个问题，且在任何认证或 TLS 之前：该控制台是否已应用 KB4893 修复？ 最核心的一对漏洞构成了一条攻击链。CVE-2026-58073 （CVSS 9.5）允许未认证的网络对等方模拟已连接的管理代理，并获得该代理的真实证书，因为代理握手是根据对等方写入其 自身 证书中的 GUID...
CVE-2026-24688
CVE-2026-24688 - pypdf - 循环引用拒绝服务漏洞 本仓库包含用于触发 CVE-2026-24688 的概念验证代码。 摘要 pypdf 的大纲（书签）解析逻辑中存在严重的拒绝服务漏洞。当处理包含循环大纲引用的 PDF 时，解析器会进入无限循环，持续分配内存，在我的机器（TM）上每秒消耗数百 MB 内存，并导致整个系统崩溃。 这是系统级 DoS，而不仅仅是应用程序挂起。 内容 maliciouscircularoutline.pdf - 带有循环大纲的利用 PDF（754 字节） createmaliciouspdf.py - 用于生成利用 PDF 的脚本...
CVE-2021-32675
CVE-2021-32675 – Redis 预分配拒绝服务（OOM） 本仓库包含针对 CVE-2021-32675 的功能性利用代码，该漏洞是 Redis 中的拒绝服务（DoS）漏洞。该缺陷允许未经身份验证的远程攻击者通过发送超大体积的批量字符串头部而不提供参数数据，触发 Redis 服务器进行大规模内存预分配，从而导致内存耗尽和服务崩溃。 描述 CVE-2021-32675 是 Redis 查询缓冲区处理中的一个漏洞。在解析 RESP（REdis 序列化协议）协议中的传入命令时，Redis 会读取批量字符串参数声明的长度（$\r\n），并在读取任何参数字节之前立即在内存中预分配一个...
CVE-2026-52482
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/shfortelnet...
CVE-2026-39020
An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...
CVE-2025-51619
A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...
CVE-2026-73786
CVE-2026-73786 is an unauthenticated Denial-of-Service vulnerability in the web-based management interface of HPE CPPM (Change and Patch Management). A remote attacker with network access can exploit the flaw without credentials to cause instability and degraded performance on the CPPM server. Th...
EUVD-2026-75123
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...
CVE-2026-73786 Unauthenticated Network-Based Denial of Service in CPPM systems
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...
CVE-2014-0075_PoC
CVE-2014-0075PoC 这是一个简单的用Python编写的PoC，演示了通过整数溢出导致的DoS攻击。...
CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE
📡 Hyland OnBase 定时服务未授权 RCE Mohammed Idrees Banyamer 安全研究员 约旦 🇯🇴 🧨 概述 本仓库包含针对 Hyland OnBase 定时服务 未授权远程代码执行漏洞的概念验证（PoC）利用程序，该漏洞源于不安全的 .NET Remoting BinaryFormatter 反序列化 。 该漏洞允许未授权攻击者向定时服务端点发送精心构造的 BinaryFormatter 载荷，并以 NT AUTHORITY\SYSTEM 权限执行任意代码。 产品： Hyland OnBase Workflow / Workview 定时服务 端口：...
RLSA-2026:65816 Important: qt6-qt5compat security update
Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed i...
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images...
qt6-qt5compat security update
An update is available for qt6-qt5compat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of...
GHSA-7W5X-HRQM-74C2 smol-toml: Denial of Service via malformed TOML documents
Summary parse can be forced into an infinite loop when a value inside an array or inline table is followed by a comment that has no trailing newline i.e. the comment "ends" the document. The library fails to exit an internal loop when attempting to find the end of the structure, resetting its...
NPM: smol-toml: Denial of Service via malformed TOML documents
NPM: smol-toml: Denial of Service via malformed TOML documents vulnerability discovered by ? in WordPress Npm smol-toml versions = 1.7.0...