#DoS
All CosmicBytez Labs articles tagged #DoS, across news, security advisories, how-to guides, and projects.
- News
HollowByte: 11-Byte Payload Triggers OpenSSL Server Memory Exhaustion
Researchers have disclosed HollowByte, a denial-of-service vulnerability that allows unauthenticated attackers to crash OpenSSL-based servers by sending a...
- News
HollowByte: 11-Byte Payload Triggers Memory Bloat DoS on OpenSSL Servers
A newly disclosed vulnerability dubbed HollowByte allows unauthenticated attackers to cause a denial-of-service condition on OpenSSL servers by sending a...
- Security
CVE-2026-44488: Axios Fetch Adapter Ignores Configured Request and Response Size Limits
Axios versions 1.7.0 through 1.15.x fail to enforce maxContentLength and maxBodyLength when using the fetch adapter, allowing unbounded request and...
- News
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
Six critical flaws in protobuf.js — the JavaScript/TypeScript Protocol Buffers library — can lead to remote code execution and denial-of-service in...
- Security
CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption (DoS)
SolarWinds Serv-U contains an unauthenticated DoS vulnerability allowing specially crafted POST requests with Content-Encoding: deflate to crash the service…
- News
18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE
An autonomous scanning system has uncovered an 18-year-old flaw in the NGINX open-source web server that can be exploited for denial of service and, under...
- Security
CVE-2026-28872: Apple iOS & iPadOS Remote Denial-of-Service
A CVSS 7.5 denial-of-service vulnerability in Apple iOS and iPadOS allows a remote attacker to exhaust device resources and crash the operating system...
- Security
CVE-2026-41309: OSSN Resource Exhaustion via Crafted Pixel
Open Source Social Network (OSSN) versions prior to 9.0 are vulnerable to resource exhaustion via specially crafted image uploads with extreme pixel...
- Security
CVE-2026-27651 — NGINX ngx_mail_auth_http_module NULL
When ngx_mail_auth_http_module is enabled with CRAM-MD5 or APOP authentication and the backend permits Auth-Wait retries, undisclosed requests can crash...