Browse / Denial of Service

Denial of Service

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Uncontrolled Resource Consumption582
• Allocation of Resources Without Limits or Throttling28
• Denial of Service19
• XML Entity Expansion3
• Uncontrolled Recursion2
• Loop with Unreachable Exit Condition ('Infinite Loop')1
• LLM04: Model Denial of Service1

Often found together with

• Memory Corruption128
• Business Logic38
• Authentication35
• Code Execution35
• Misconfiguration31
• Information Disclosure29

Most upvoted Denial of Service reports

AllValidInformativeN/ADuplicate

1. Incomplete Fix for CVE-2026-21637: OCSPRequest and resumeSession Events Crash Node.js TLS Server via Unhandled Synchronous ExceptionsInformativeUncontrolled Resource Consumption · high · Node.js
   41 votes
2. OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)InformativeUncontrolled Resource Consumption · low · curl
   30 votes
3. Unbounded memory consumption via compressed HTTP responses (gzip/brotli/zstd)InformativeUncontrolled Resource Consumption · medium · curl
   21 votes
4. xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of serviceInformativeUncontrolled Resource Consumption · Sifchain
   $5021 votes
5. HTTP/2 PUSH_PROMISE DoSInformativeUncontrolled Resource Consumption · medium · curl
   20 votes
6. libcurl 8.20.0 incomplete fix for CVE-2026-7168: changing only CURLOPT_PROXYPORT leaks stale Proxy Digest auth to a different proxyInformativeUncontrolled Resource Consumption · medium · curl
   18 votes
7. DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389InformativeUncontrolled Resource Consumption · medium · Yelp
   15 votes
8. DoS in bigdecimal's sqrt function due to miscalculation of loop iterationsInformativeUncontrolled Resource Consumption · medium · Ruby
   14 votes
9. Memory leak in Curl_auth_create_ntlm_type3_messageInformativeUncontrolled Resource Consumption · low · curl
   13 votes
10. HTTP Digest nonce reused across an https→http scheme change on the same handleInformativeUncontrolled Resource Consumption · low · curl
    11 votes
11. Permanent DOS for new users!InformativeUncontrolled Resource Consumption · high · Stripo Inc
    11 votes
12. Expose user IP if TOR crashsInformativeUncontrolled Resource Consumption · Tor
    11 votes
13. Please contact me @sehacure otherwise i am going to disclose in Full disclosure mailing list :p InformativeUncontrolled Resource Consumption · MS-DOS
    10 votes
14. curl_easy_header runs at O(N) or worse and can be abused to use minute(s) of CPU timeInformativeUncontrolled Resource Consumption · curl
    9 votes
15. Memory leak from doh_write_cbInformativeAllocation of Resources Without Limits or Throttling · curl
    9 votes
16. 'net/ftp': Uncontrolled Resource Consumption (Memory/CPU)InformativeUncontrolled Resource Consumption · medium · Ruby
    8 votes
17. Email changingInformativeUncontrolled Resource Consumption · HackerOne
    8 votes
18. HTTP/2 proxy CONNECT tunnel unbounded 1xx chain (missing Curl_bump_headersize cap in cf-h2-proxy.c)InformativeAllocation of Resources Without Limits or Throttling · curl
    7 votes
19. CVE-2026-11586 fix is incomplete: auto-PONG memory grows without limit through curl_ws_recv() (CONNECT_ONLY)InformativeAllocation of Resources Without Limits or Throttling · low · curl
    6 votes
20. Regular Expression Denial of Service vulnerabilityInformativeUncontrolled Resource Consumption · medium · Reddit
    6 votes
21. Leaked of Profile Image from URL changingInformativeUncontrolled Resource Consumption · Nextcloud
    6 votes
22. Lodash "difference" (possibly others) Function Denial of Service Through Unvalidated InputInformativeUncontrolled Resource Consumption · critical · Node.js third-party modules
    6 votes
23. curl EXPIRE_SHUTDOWN timer never armed for silent servers: connection-shutdown timeout bypass in cshutdn (event-driven mode)InformativeUncontrolled Resource Consumption · medium · curl
    5 votes
24. passive FTPS data connection handshake blocks curl_multi_perform() with no timeout (regression in 8.19.0)InformativeUncontrolled Resource Consumption · low · curl
    4 votes
25. Memory leak in CURLOPT_XOAUTH2_BEARERInformativeUncontrolled Resource Consumption · medium · curl
    4 votes
26. Bypassing captcha in registration on Hosted siteInformativeUncontrolled Resource Consumption · medium · Weblate
    4 votes
27. Javascript confirm() crashes Brave on PCInformativeUncontrolled Resource Consumption · medium · Brave Software
    4 votes
28. Header Injection InformativeUncontrolled Resource Consumption · Uber
    4 votes
29. Password reset link not validated.InformativeUncontrolled Resource Consumption · X / xAI
    4 votes
30. Denial of Service vulnerability in curl when parsing MQTT server responseInformativeUncontrolled Resource Consumption · medium · curl
    3 votes
31. Poll loop/hang on incomplete HTTP headerInformativeUncontrolled Resource Consumption · medium · curl
    3 votes
32. Unable to change profile pictureInformativeUncontrolled Resource Consumption · Legal Robot
    3 votes
33. API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpointInformativeUncontrolled Resource Consumption · medium · Kubernetes
    2 votes
34. Denial of service in report view.InformativeUncontrolled Resource Consumption · HackerOne
    2 votes
35. Pixel flood attack in https://riders.uber.com/profileInformativeUncontrolled Resource Consumption · Uber
    2 votes
36. Possibility of DoS attack at https://sifchain.finance// via CVE-2018-6389 exploitationInformativeUncontrolled Resource Consumption · Sifchain
    1 votes
37. Parallel upload hangs curl if upload file not foundInformativeUncontrolled Resource Consumption · curl
    1 votes
38. Denial of Service when entring an Array in email at seetingsInformativeUncontrolled Resource Consumption · medium · Nextcloud
    1 votes
39. DRb denial of service vulnerabilityInformativeUncontrolled Resource Consumption · Ruby
    1 votes
40. Http response is not ended although underlying socket is already destroyedInformativeUncontrolled Resource Consumption · Node.js
    1 votes
41. Pippo XML Entity Expansion (Billion Laughs Attack)InformativeXML Entity Expansion · high · Central Security Project
    1 votes
42. Transaction Pending Via Ip Change InformativeUncontrolled Resource Consumption · Coinbase
    1 votes
43. grtp.co is vulnerable to http-vuln-cve2011-3192InformativeUncontrolled Resource Consumption · Gratipay
    1 votes
44. DoS of https://blog.makerdao.com/ via CVE-2018-6389InformativeUncontrolled Resource Consumption · BlockDev Sp. Z o.o
45. SEGV in parse_rat()InformativeUncontrolled Resource Consumption · Ruby
46. DOS in browser using window.print() functionInformativeUncontrolled Resource Consumption · Brave Software
47. UDP port 5060 (SIP) OpenInformativeUncontrolled Resource Consumption · Gratipay