CVE-2026-44037

The OFFIS DCMTK 3.7.0 library is vulnerable to a denial of service (stack exhaustion and process crash) due to uncontrolled mutual recursion between the functions DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement(), and DcmJSONReader::parseSequence() located in dcmdata/libsrc/dcjsonrd.cc...

EUVD-2026-94940

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet, DcmJSONReader::parseElement and DcmJSONReader::parseSequence in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOM JSON document...

CVE-2026-44037 Uncontrolled recursion in DCMTK JSON reader allows denial of service

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet, DcmJSONReader::parseElement and DcmJSONReader::parseSequence in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOM JSON document...

CVE-2026-44036

The OFFIS DCMTK 3.7.0 library is vulnerable to a denial of service (DoS) due to uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() within the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc ). An attacker can trigger a stack exhausti...

EUVD-2026-94939

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...

CVE-2026-44036 Uncontrolled recursion in DCMTK xml2dcm allows denial of service

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...

CVE-2026-44035

The OFFIS DCMTK 3.7.0 software is vulnerable to a denial of service (stack exhaustion and process crash) due to uncontrolled recursion in the DcmDicomDir::moveRecordToTree() function located in dcmdata/libsrc/dcdicdir.cc. An attacker can trigger this by providing a crafted DICOMDIR file containin...

CVE-2026-44035 Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

Uncontrolled recursion in DcmDicomDir::moveRecordToTree in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset o...

CVE-2026-44033

The bundled XML parser in OFFIS DCMTK 3.7.0 (specifically ofstd/libsrc/ofxml.cc) contains an uncontrolled recursion vulnerability within the XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() functions. An attacker can trigger a denial of service (stack exhaustion and process crash) by provid...

EUVD-2026-94936

Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...

CVE-2026-44033 Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service

Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...

EUVD-2026-94935

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

CVE-2026-44031 Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

CVE-2025-60751

CVE-2025-60751: GeographicLib Stack-based Buffer Overflow 📌 यह रिपॉज़िटरी भेद्यता CVE-2025-60751 का विश्लेषण और तकनीकी दस्तावेज़ीकरण शामिल करता है, जो C++ लाइब्रेरी GeographicLib में स्थित एक स्टैक-आधारित बफर ओवरफ़्लो Stack-based Buffer Overflow दोष है। 📝 विवरण यह भेद्यता DMS::InternalDecode...

kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Mario Kart 8 Deluxe के "KartLANPwn" स्टैक-आधारित बफ़र ओवरफ़्लो भेद्यता के लिए जानकारी और प्रूफ-ऑफ-कॉन्सेप्ट चैड हयात द्वारा लिखित | ---|--- CVE| CVE-2024-45200 CVSS 3.1| अनिर्धारित Nintendo.. दावा है कि यह 4.3/10 है भुगतान किया गया बाउंटी| $512 H1 रिपोर्ट| 2611669 खोजा...

CVE-2019-1068

CVE-2019-1068 Microsoft SQL Server स्टैक ओवरफ्लो भेद्यता के लिए मूल कारण विश्लेषण और PoC, "svl.dll" को रिवर्स करके प्राप्त किया गया। हमारे काम के लिंक: 1. अटाबर्क का ब्लॉग 2. फ़ातिह का ब्लॉग 3. सेम का ब्लॉग https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

cve-2024-53703-poc

cve-2024-53703-poc CVE-2024-53703 का शोषण करने हेतु POC, जो SonicWall SMA modhttprp.so में एक स्टैक-आधारित बफर ओवरफ्लो है।...

jsonorg-fn1

json.org CVE-2022-45688 गलत नकारात्मक यह प्रोजेक्ट json.org में CVE-2022-45688 को दर्शाता है -- एक सरल एप्लिकेशन XML2JSONConverter है जो इनपुट से XML पढ़ता है, उसे JSON में बदलता है और कंसोल पर pretty-print करता है। दुर्भावनापूर्ण इनपुट का उपयोग करने पर, एप्लिकेशन स्टैकओवरफ्लो के साथ क्रैश हो जात...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 आपूर्ति श्रृंखला शोषण ढांचा अप्रतिबंधित वर्गीकृत सामग्री - केवल अधिकृत रेड टीमिंग के लिए 1. कार्यकारी सारांश निर्धारणात्मक विश्लेषण LlamaStack-RCE एक उच्च-विश्वसनीयता सिमुलेशन और शोषण ढांचा है जो...