Browse / Denial of Service

Denial of Service

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Uncontrolled Resource Consumption582
• Allocation of Resources Without Limits or Throttling28
• Denial of Service19
• XML Entity Expansion3
• Uncontrolled Recursion2
• Loop with Unreachable Exit Condition ('Infinite Loop')1
• LLM04: Model Denial of Service1

Often found together with

• Memory Corruption128
• Business Logic38
• Authentication35
• Code Execution35
• Misconfiguration31
• Information Disclosure29

Most upvoted Denial of Service reports

AllValidInformativeN/ADuplicate

1. DoS on PayPal via web cache poisoningUncontrolled Resource Consumption · medium · PayPal
   $9,700851 votes
2. profile-picture name parameter with large value lead to DoS for other users and programs on the platformUncontrolled Resource Consumption · medium · HackerOne
   475 votes
3. Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerUncontrolled Resource Consumption · medium · Automattic
   405 votes
4. [Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableUncontrolled Resource Consumption · X / xAI
   323 votes
5. Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)Uncontrolled Resource Consumption · LocalTapiola
   $18,000264 votes
6. Denial of service via cache poisoningUncontrolled Resource Consumption · medium · HackerOne
   $2,500253 votes
7. Static files on HackerOne.com can be made inaccessible through Cache Poisoning attackUncontrolled Resource Consumption · medium · HackerOne
   228 votes
8. Uploading large payload on domain instructions causes server-side DoSUncontrolled Resource Consumption · medium · HackerOne
   $2,500210 votes
9. DOS via Mutation Aliasing in GraphQL Account Recovery Phone Number Verification APIUncontrolled Resource Consumption · HackerOne
   185 votes
10. Bypass password reset rate limit protection at moneybird.com/passwordsUncontrolled Resource Consumption · high · Moneybird
    164 votes
11. xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS)Uncontrolled Resource Consumption · Nord Security
    162 votes
12. Node disk DOS by writing to container /etc/hostsUncontrolled Resource Consumption · medium · Kubernetes
    $1,000161 votes
13. Enable 2FA without verifying the emailUncontrolled Resource Consumption · medium · Moneybird
    149 votes
14. DoS on the Issue page by exploiting Mermaid.Uncontrolled Resource Consumption · medium · GitLab
    $3,000145 votes
15. url that twitter mobile site can not loadUncontrolled Resource Consumption · low · X / xAI
    $1,120142 votes
16. character limitation bypass can lead to DoS on Twitter App and 500 Internal Server ErrorUncontrolled Resource Consumption · medium · X / xAI
    141 votes
17. Multiple endpoints are vulnerable to XML External Entity injection (XXE) Denial of Service · Pornhub
    $2,500138 votes
18. a very long name in hey.com can prevent anyone from accessing their contacts and probably can cause denial of serviceUncontrolled Resource Consumption · high · Basecamp
    $1,000132 votes
19. Permanent DoS with one click.Uncontrolled Resource Consumption · medium · Automattic
    127 votes
20. DOS of RSKJ serverUncontrolled Resource Consumption · high · Rootstock Labs
    $5,000121 votes
21. ActiveStorage throws exception when using whitespace as filename, may lead to denial of service of multiple pagesUncontrolled Resource Consumption · medium · HackerOne
    111 votes
22. Cache Poisoning DoS on downloads.exodus.comUncontrolled Resource Consumption · high · Exodus
    110 votes
23. Denial of Service via Hyperlinks in PostsUncontrolled Resource Consumption · medium · Slack
    $1,500109 votes
24. Unsufficent input verification leads to DoS and resource consumptionUncontrolled Resource Consumption · low · Sorare
    $300108 votes
25. Denial of Service (DoS) Vulnerability in Drafts Creation EndpointUncontrolled Resource Consumption · high · Discourse
    $1,02498 votes
26. Critical Deadlock Vulnerability in Monero RPC Leading to Complete Node ParalysisUncontrolled Resource Consumption · critical · Monero
    97 votes
27. low-level p2p ping + tcp flooding leads to a remote crash in monerodUncontrolled Resource Consumption · critical · Monero
    97 votes
28. Attacker with an Old account might still be able to DoS ctf.hacker101.com by sending a Crafted request Uncontrolled Resource Consumption · low · HackerOne
    97 votes
29. Denial of Service | twitter.com & mobile.twitter.comUncontrolled Resource Consumption · medium · X / xAI
    $1,12089 votes
30. Crafted smart contract can take 8 minutes to execute due to bug in modexp precompile.Uncontrolled Resource Consumption · high · Rootstock Labs
    85 votes
31. Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource ExhaustionUncontrolled Resource Consumption · high · Discourse
    84 votes
32. DoS attack via comment on IssueUncontrolled Resource Consumption · low · GitLab
    $1,00084 votes
33. CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()Allocation of Resources Without Limits or Throttling · medium · Internet Bug Bounty
    $2,16283 votes
34. Cache poisoning Denial of Service affecting assets.gitlab-static.netUncontrolled Resource Consumption · high · GitLab
    83 votes
35. Denial Of Service (Out Of Memory) on Updating Bounty Table [Urgent]Uncontrolled Resource Consumption · low · HackerOne
    83 votes
36. https://themes.shopify.com::: Host header web cache poisoning lead to DoSUncontrolled Resource Consumption · medium · Shopify
    $2,90082 votes
37. TLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and FD LeakUncontrolled Resource Consumption · medium · Node.js
    81 votes
38. [mijn.werkenbijdefensie.nl] Denial of service occurs due to lack of email length confirmationUncontrolled Resource Consumption · Radancy
    79 votes
39. High resource consumption by insufficient sanitization of forum threads paginationAllocation of Resources Without Limits or Throttling · medium · Flickr
    $47975 votes
40. DoS of https://nordvpn.com/ via CVE-2018-6389 exploitationUncontrolled Resource Consumption · Nord Security
    73 votes
41. Unauthenticated WordPress Database Repair DoSN/AUncontrolled Resource Consumption · high · WordPress
    70 votes
42. [www.werkenbijbakertilly.nl] Denial of service due to incorrect server return can result in total denial of service.Uncontrolled Resource Consumption · Radancy
    67 votes
43. Denial of Service [Chrome]Uncontrolled Resource Consumption · medium · X / xAI
    $56066 votes
44. Pixel flood attackUncontrolled Resource Consumption · HackerOne
    $50066 votes
45. "Assertion failed" in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crashUncontrolled Resource Consumption · high · Node.js
    65 votes
46. DOS: taking down a 1k users Gitlab EE instance or multiple Sidekiq instances by importing a malicious repo from a Github EE self-hosted serverUncontrolled Resource Consumption · medium · GitLab
    $2,30064 votes
47. Authorization issue in Google G Suite allows DoS through HTTP redirectUncontrolled Resource Consumption · high · Uber
    62 votes
48. [CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action TextUncontrolled Resource Consumption · low · Internet Bug Bounty
    $50560 votes
49. CVE-2024-34750 Apache Tomcat DoS vulnerability in HTTP/2 connectorUncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,92060 votes
50. DoS: type confusion in mrb_no_method_errorUncontrolled Resource Consumption · critical · shopify-scripts
    60 votes
51. CVE-2025-5399: WebSocket endless loopLoop with Unreachable Exit Condition ('Infinite Loop') · low · curl
    58 votes
52. Circular based introspetion Query leading to single request denial of service and cost consumption and query cost on api.sorare.com/graphqlUncontrolled Resource Consumption · medium · Sorare
    57 votes
53. Possible DoS Vulnerability with Range Header in RackUncontrolled Resource Consumption · high · Internet Bug Bounty
    $5,42056 votes
54. Memory Leak in libcurl via Location Header Handling (CWE-770)SpamAllocation of Resources Without Limits or Throttling · high · curl
    55 votes
55. [api.tumblr.com] Denial of Service by cookies manipulationUncontrolled Resource Consumption · medium · Automattic
    55 votes
56. DOM based cookie bombUncontrolled Resource Consumption · X / xAI
    55 votes
57. DoS via markdown API from unauthenticated userUncontrolled Resource Consumption · medium · GitHub
    $4,00054 votes
58. All functions that allow users to specify color code are vulnerable to ReDoSUncontrolled Resource Consumption · low · GitLab
    $1,00053 votes
59. DOM Based Cookie Bomb in *.acronis.com via x-clickref GET ParameterUncontrolled Resource Consumption · Acronis
    $20052 votes
60. SSRF in https://imgur.com/vidgif/urlUncontrolled Resource Consumption · Imgur
    52 votes
61. ReDoS( Ruby, Time)Uncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,00051 votes
62. GIF floodingUncontrolled Resource Consumption · HackerOne
    $25051 votes
63. Clientside resource Exhausting by exploiting gitlab math rendering Uncontrolled Resource Consumption · low · GitLab
    50 votes
64. DoS through PeerExplorerUncontrolled Resource Consumption · high · Rootstock Labs
    $4,00050 votes
65. CVE-2024-41989: Denial-Of-Service vulnerability in the floatformat template filter when input string contains a big exponent in scientific notationUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,14249 votes
66. Specific Payload makes a Users Posts unavailableUncontrolled Resource Consumption · medium · FetLife
    $10049 votes
67. Memory Exhaustion in CometBFT v1.0.1 via malicious ProposalMessage leads to network-wide denial of serviceN/AUncontrolled Resource Consumption · Cosmos
    47 votes
68. RPC service DOSUncontrolled Resource Consumption · medium · Monero
    47 votes
69. Potential DoS vulnerability in Django in multipart parserUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,40047 votes
70. Inviting excessive long email addresses to a calendar event makes the server unresponsiveUncontrolled Resource Consumption · medium · Nextcloud
    46 votes
71. Dynamic fee algorithm doesn't check for zero feeUncontrolled Resource Consumption · low · Monero
    46 votes
72. CVE-2024-43398: DoS vulnerability in REXMLUncontrolled Resource Consumption · low · Internet Bug Bounty
    $50545 votes
73. [rev-app.informatica.com] - XXEUncontrolled Resource Consumption · high · Informatica
    45 votes
74. Security check upN/AAllocation of Resources Without Limits or Throttling · low · curl
    44 votes
75. Possible ReDoS vulnerability in query parameter filtering in Action DispatchUncontrolled Resource Consumption · medium · Internet Bug Bounty
    44 votes
76. Hash-Collision Denial-of-Service Vulnerability in Markdown ParserUncontrolled Resource Consumption · medium · Reddit
    44 votes
77. 12 Days of Hacky Holidays write-up, but as a text-based RPG?Uncontrolled Resource Consumption · h1-ctf
    44 votes
78. Malformed string sent through FireServer leads to server freezing/hangingUncontrolled Resource Consumption · medium · Roblox
    44 votes
79. DOS in stream filtersUncontrolled Resource Consumption · high · Internet Bug Bounty
    44 votes
80. Hogging up all the resources on hackerone.comUncontrolled Resource Consumption · medium · HackerOne
    44 votes
81. Denial of Service caused by HTTP/2 CONTINUATION FloodUncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,86042 votes
82. Incomplete Fix for CVE-2026-21637: OCSPRequest and resumeSession Events Crash Node.js TLS Server via Unhandled Synchronous ExceptionsInformativeUncontrolled Resource Consumption · high · Node.js
    41 votes
83. Server-side ReDoS via user-controlled regex in OIDC Access PolicyUncontrolled Resource Consumption · RubyGems
    41 votes
84. The possibility of disrupting the normal operation of frontend using markdownUncontrolled Resource Consumption · low · HackerOne
    41 votes
85. DoS attacks utilizing camo.stream.highwebmedia.comUncontrolled Resource Consumption · medium · Chaturbate
    $40041 votes
86. Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,58040 votes
87. http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacksUncontrolled Resource Consumption · high · Internet Bug Bounty
    $3,49540 votes
88. Memory Leak in OCUtil.dll library in Desktop client can lead to DoSUncontrolled Resource Consumption · medium · Nextcloud
    $10040 votes
89. Type confusion in mrb_exc_set leading to memory corruptionUncontrolled Resource Consumption · critical · shopify-scripts
    40 votes
90. HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiBN/AAllocation of Resources Without Limits or Throttling · curl
    39 votes
91. Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crashUncontrolled Resource Consumption · high · Internet Bug Bounty
    $3,64539 votes
92. No password length limit when creating a user as an administratorUncontrolled Resource Consumption · low · Nextcloud
    39 votes
93. %0A (New line) and limitness URL leads to DoS at all system [Main adress (https://www.acronis.com/)]Uncontrolled Resource Consumption · low · Acronis
    36 votes
94. Application DOS via specially crafted payload on 3d.cs.moneyUncontrolled Resource Consumption · medium · CS Money
    36 votes
95. Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After TeardownUncontrolled Resource Consumption · low · Tor
    $10035 votes
96. sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txsetUncontrolled Resource Consumption · high · Monero
    35 votes
97. DoS via Unbounded Memory Allocation in sendWebStream on Fastify v5.7.0+ leads to OOM crash when backpressure is ignoredUncontrolled Resource Consumption · Fastify
    35 votes
98. Unbounded memory growth with session handling in TLSv1.3Allocation of Resources Without Limits or Throttling · low · Internet Bug Bounty
    $49735 votes
99. Change contents of the careers iframe in https://corp.badoo.com/jobsUncontrolled Resource Consumption · Bumble
    35 votes
100. Memory leak that enables remote Denial of Service against applications processing TLS client certificatesUncontrolled Resource Consumption · medium · Node.js
     34 votes