CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: - POST /api/v1/terminal → createTerminal terminal.go:27-67 - POST /api/v1/file → createFM fm.go:28-67 Both call rpc.NezhaHandlerSingleton.CreateStreamstreamId, ... which inserts a...

EUVD-2020-11354

Malware in sbrugna...

CVE-2024-4153

CVE-2024-4153 entry is rejected/not used and does not represent an active vulnerability.

Improper Authorization in librenms/librenms

Description LibreNMS v22.1.0 allows users with the normal role/level to interact with the plugin setting resulting in the users could take action such as switching on/off any installed plugins which are supposedly accessible by the Administrator only. Proof of Concept Affected endpoints: 1 GET...

Security Bulletin: Resilient is affected by a potential over consumption of resources due a lack of limiting of the size and amount of resources requested by users (CVE-2017-1627)

Summary Security Bulletin: Resilient is affected by a potential over consumption of resources due a lack of limiting of the size and amount of resources requested by users CVE-2017-1627 Vulnerability Details Summary Resilient has addressed the issue by enforcing limits of resources requested by...

libpng: does not check length of chunks against user limit

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

Citrix Virtual Desktops Licensing - Increment Lines Explained

Note: The Citrix License Administration Console has reached end of life and end of support in Citrix Licensing 11.16.3. Use theCitrix Licensing Manager This article contains information about the increment line in Citrix Virtual Desktops Licensing.XenDesktop has been rebranded as Citrix Virtual...

AZL-44469 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

MIT Kerberos / Heimdal privilege escalation

setuid/seteuid return code is not checked, allowing user to bypass protection by exhausting user limits...

Suid utilities (vixie-cron, shadow, ppp) user limits privilege escalation

setuid return code is not checked. It makes it possible to execute code with root privileges by exhausting user limits...

login_patch.txt

diff -ur ./util-linux-2.9o/lib/pathnames.h ./util-linux-2.9o-mp/lib/pathnames.h --- ./util-linux-2.9o/lib/pathnames.h Sun Oct 11 14:19:16 1998 +++ ./util-linux-2.9o-mp/lib/pathnames.h Wed Jul 14 22:51:13 1999 @@ -86,6 +86,7 @@ define PATHSECURE "/etc/securesingle" define PATHUSERTTY "/etc/usertty...

max_processes.txt

Subject: Re: limit maximum nr. of processes. To: [email protected] El dia Wed, Sep 01, 1999 at 10:53:48AM +0200, Petter Wahlman escribió: to limit the maximum number of processes you can use the Linux-PAM edit /etc/pam.d/login %PAM-1.0 auth required /lib/security/pamsecuretty.so auth...

linux.2.x.ipc.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x IPC vunerability Linux IPC implementation seems to be broken. I noticed Alan about one/two months ago, so I believe it has been fixed in recent 2.2.x Linuxes. In fact, any luser may consume whole memory available on system using...

linux.2.x.mmap.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x mmap vunerability Linux 2.0.36 has the similiar problem with copy-on-write pages allocated with mmap - as these pages are not accounted within per-user limits. Fortunately, it's less harmfull than 5, because memory will be freed...