21 matches found
urlhunter
o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...
CVE-2026-15975
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to insufficient resource throttling when processing...
EUVD-2026-50476
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to insufficient resource throttling when processing...
PT-2026-64879
Name of the Vulnerable Software and Affected Versions Apache Thrift versions 0.19.0 through 0.23.x Description Allocation of Resources Without Limits or Throttling in Apache Thrift Java bindings can lead to an unbounded read, potentially resulting in a Denial of Service DoS, a condition where a...
The vulnerability of the Request.post() function in the aiohttp HTTP client allows a attacker to trigger a service failure.
The vulnerability of the Request.post function in the aiohttp HTTP client is related to unlimited resource distribution or throttling. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Apache HTTP Server 安全漏洞
Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There were security vulnerabilities in Apache HTTP Server versions 2.4.30 to 2.4.66. These...
CVE-2026-3505
Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...
Allocation of Resources Without Limits or Throttling
Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the Http2Sessions.getSession function in the HTTP/2 session cleanup. An attacker can cause the client process...
Security Update for Microsoft .NET Core (March 2026)
The version of tested product installed on the remote host is 8.x prior to 8.0.25, 9.x prior to 9.0.14, or 10.x prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory: - Out-of-bounds read in .NET allows an unauthorized attacker to deny servic...
QNAP Qsync Central 安全漏洞
QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation or throttling, which could le...
EUVD-2022-35690
Malicious code in bioql PyPI...
EUVD-2023-2376
Malicious code in bioql PyPI...
EUVD-2022-24742
Malicious code in bioql PyPI...
EUVD-2022-0262
Malicious code in bioql PyPI...
CVE-2025-46807
A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...
GO-2025-3557 Ollama Allocation of Resources Without Limits or Throttling vulnerability in github.com/ollama/ollama
Ollama Allocation of Resources Without Limits or Throttling vulnerability in github.com/ollama/ollama...
CVE-2024-52972
CVE-2024-52972 affects Kibana: an allocation of resources without limits or throttling can cause a crash via a specially crafted request to /api/metrics/snapshot. The issue is exploitable by users with read access to Observability Metrics or Logs in Kibana. Connected sources corroborate the same ...
scandium: Failing DTLS handshakes may cause throttling to block processing of records
A flaw was found in the Eclipse Californium Scandium package. This issue occurs when failing handshakes don't clean up counters for throttling, causing the threshold to be reached without being released again, resulting in a denial of service. An attacker could submit a high quantity of server...
