Browse / Denial of Service

Denial of Service

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Uncontrolled Resource Consumption582
• Allocation of Resources Without Limits or Throttling28
• Denial of Service19
• XML Entity Expansion3
• Uncontrolled Recursion2
• Loop with Unreachable Exit Condition ('Infinite Loop')1
• LLM04: Model Denial of Service1

Often found together with

• Memory Corruption128
• Business Logic38
• Authentication35
• Code Execution35
• Misconfiguration31
• Information Disclosure29

Most upvoted Denial of Service reports

AllValidInformativeN/ADuplicate

1. DoS on PayPal via web cache poisoningUncontrolled Resource Consumption · medium · PayPal
   $9,700851 votes
2. profile-picture name parameter with large value lead to DoS for other users and programs on the platformUncontrolled Resource Consumption · medium · HackerOne
   475 votes
3. Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerUncontrolled Resource Consumption · medium · Automattic
   405 votes
4. [Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableUncontrolled Resource Consumption · X / xAI
   323 votes
5. Denial of service via cache poisoningUncontrolled Resource Consumption · medium · HackerOne
   $2,500253 votes
6. Static files on HackerOne.com can be made inaccessible through Cache Poisoning attackUncontrolled Resource Consumption · medium · HackerOne
   228 votes
7. Uploading large payload on domain instructions causes server-side DoSUncontrolled Resource Consumption · medium · HackerOne
   $2,500210 votes
8. DOS via Mutation Aliasing in GraphQL Account Recovery Phone Number Verification APIUncontrolled Resource Consumption · HackerOne
   185 votes
9. Bypass password reset rate limit protection at moneybird.com/passwordsUncontrolled Resource Consumption · high · Moneybird
   164 votes
10. Node disk DOS by writing to container /etc/hostsUncontrolled Resource Consumption · medium · Kubernetes
    $1,000161 votes
11. Enable 2FA without verifying the emailUncontrolled Resource Consumption · medium · Moneybird
    149 votes
12. DoS on the Issue page by exploiting Mermaid.Uncontrolled Resource Consumption · medium · GitLab
    $3,000145 votes
13. url that twitter mobile site can not loadUncontrolled Resource Consumption · low · X / xAI
    $1,120142 votes
14. character limitation bypass can lead to DoS on Twitter App and 500 Internal Server ErrorUncontrolled Resource Consumption · medium · X / xAI
    141 votes
15. a very long name in hey.com can prevent anyone from accessing their contacts and probably can cause denial of serviceUncontrolled Resource Consumption · high · Basecamp
    $1,000132 votes
16. Permanent DoS with one click.Uncontrolled Resource Consumption · medium · Automattic
    127 votes
17. DOS of RSKJ serverUncontrolled Resource Consumption · high · Rootstock Labs
    $5,000121 votes
18. ActiveStorage throws exception when using whitespace as filename, may lead to denial of service of multiple pagesUncontrolled Resource Consumption · medium · HackerOne
    111 votes
19. Cache Poisoning DoS on downloads.exodus.comUncontrolled Resource Consumption · high · Exodus
    110 votes
20. Denial of Service via Hyperlinks in PostsUncontrolled Resource Consumption · medium · Slack
    $1,500109 votes
21. Unsufficent input verification leads to DoS and resource consumptionUncontrolled Resource Consumption · low · Sorare
    $300108 votes
22. Denial of Service (DoS) Vulnerability in Drafts Creation EndpointUncontrolled Resource Consumption · high · Discourse
    $1,02498 votes
23. Critical Deadlock Vulnerability in Monero RPC Leading to Complete Node ParalysisUncontrolled Resource Consumption · critical · Monero
    97 votes
24. low-level p2p ping + tcp flooding leads to a remote crash in monerodUncontrolled Resource Consumption · critical · Monero
    97 votes
25. Attacker with an Old account might still be able to DoS ctf.hacker101.com by sending a Crafted request Uncontrolled Resource Consumption · low · HackerOne
    97 votes
26. Denial of Service | twitter.com & mobile.twitter.comUncontrolled Resource Consumption · medium · X / xAI
    $1,12089 votes
27. Crafted smart contract can take 8 minutes to execute due to bug in modexp precompile.Uncontrolled Resource Consumption · high · Rootstock Labs
    85 votes
28. Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource ExhaustionUncontrolled Resource Consumption · high · Discourse
    84 votes
29. DoS attack via comment on IssueUncontrolled Resource Consumption · low · GitLab
    $1,00084 votes
30. CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()Allocation of Resources Without Limits or Throttling · medium · Internet Bug Bounty
    $2,16283 votes
31. Cache poisoning Denial of Service affecting assets.gitlab-static.netUncontrolled Resource Consumption · high · GitLab
    83 votes
32. Denial Of Service (Out Of Memory) on Updating Bounty Table [Urgent]Uncontrolled Resource Consumption · low · HackerOne
    83 votes
33. https://themes.shopify.com::: Host header web cache poisoning lead to DoSUncontrolled Resource Consumption · medium · Shopify
    $2,90082 votes
34. TLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and FD LeakUncontrolled Resource Consumption · medium · Node.js
    81 votes
35. High resource consumption by insufficient sanitization of forum threads paginationAllocation of Resources Without Limits or Throttling · medium · Flickr
    $47975 votes
36. Denial of Service [Chrome]Uncontrolled Resource Consumption · medium · X / xAI
    $56066 votes
37. Pixel flood attackUncontrolled Resource Consumption · HackerOne
    $50066 votes
38. "Assertion failed" in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crashUncontrolled Resource Consumption · high · Node.js
    65 votes
39. DOS: taking down a 1k users Gitlab EE instance or multiple Sidekiq instances by importing a malicious repo from a Github EE self-hosted serverUncontrolled Resource Consumption · medium · GitLab
    $2,30064 votes
40. Authorization issue in Google G Suite allows DoS through HTTP redirectUncontrolled Resource Consumption · high · Uber
    62 votes
41. [CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action TextUncontrolled Resource Consumption · low · Internet Bug Bounty
    $50560 votes
42. CVE-2024-34750 Apache Tomcat DoS vulnerability in HTTP/2 connectorUncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,92060 votes
43. DoS: type confusion in mrb_no_method_errorUncontrolled Resource Consumption · critical · shopify-scripts
    60 votes
44. CVE-2025-5399: WebSocket endless loopLoop with Unreachable Exit Condition ('Infinite Loop') · low · curl
    58 votes
45. Circular based introspetion Query leading to single request denial of service and cost consumption and query cost on api.sorare.com/graphqlUncontrolled Resource Consumption · medium · Sorare
    57 votes
46. Possible DoS Vulnerability with Range Header in RackUncontrolled Resource Consumption · high · Internet Bug Bounty
    $5,42056 votes
47. [api.tumblr.com] Denial of Service by cookies manipulationUncontrolled Resource Consumption · medium · Automattic
    55 votes
48. DOM based cookie bombUncontrolled Resource Consumption · X / xAI
    55 votes
49. DoS via markdown API from unauthenticated userUncontrolled Resource Consumption · medium · GitHub
    $4,00054 votes
50. All functions that allow users to specify color code are vulnerable to ReDoSUncontrolled Resource Consumption · low · GitLab
    $1,00053 votes
51. SSRF in https://imgur.com/vidgif/urlUncontrolled Resource Consumption · Imgur
    52 votes
52. ReDoS( Ruby, Time)Uncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,00051 votes
53. GIF floodingUncontrolled Resource Consumption · HackerOne
    $25051 votes
54. Clientside resource Exhausting by exploiting gitlab math rendering Uncontrolled Resource Consumption · low · GitLab
    50 votes
55. DoS through PeerExplorerUncontrolled Resource Consumption · high · Rootstock Labs
    $4,00050 votes
56. CVE-2024-41989: Denial-Of-Service vulnerability in the floatformat template filter when input string contains a big exponent in scientific notationUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,14249 votes
57. Specific Payload makes a Users Posts unavailableUncontrolled Resource Consumption · medium · FetLife
    $10049 votes
58. RPC service DOSUncontrolled Resource Consumption · medium · Monero
    47 votes
59. Potential DoS vulnerability in Django in multipart parserUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,40047 votes
60. Inviting excessive long email addresses to a calendar event makes the server unresponsiveUncontrolled Resource Consumption · medium · Nextcloud
    46 votes
61. Dynamic fee algorithm doesn't check for zero feeUncontrolled Resource Consumption · low · Monero
    46 votes
62. CVE-2024-43398: DoS vulnerability in REXMLUncontrolled Resource Consumption · low · Internet Bug Bounty
    $50545 votes
63. [rev-app.informatica.com] - XXEUncontrolled Resource Consumption · high · Informatica
    45 votes
64. Possible ReDoS vulnerability in query parameter filtering in Action DispatchUncontrolled Resource Consumption · medium · Internet Bug Bounty
    44 votes
65. Hash-Collision Denial-of-Service Vulnerability in Markdown ParserUncontrolled Resource Consumption · medium · Reddit
    44 votes
66. 12 Days of Hacky Holidays write-up, but as a text-based RPG?Uncontrolled Resource Consumption · h1-ctf
    44 votes
67. Malformed string sent through FireServer leads to server freezing/hangingUncontrolled Resource Consumption · medium · Roblox
    44 votes
68. DOS in stream filtersUncontrolled Resource Consumption · high · Internet Bug Bounty
    44 votes
69. Hogging up all the resources on hackerone.comUncontrolled Resource Consumption · medium · HackerOne
    44 votes
70. Denial of Service caused by HTTP/2 CONTINUATION FloodUncontrolled Resource Consumption · high · Internet Bug Bounty
    $4,86042 votes
71. Server-side ReDoS via user-controlled regex in OIDC Access PolicyUncontrolled Resource Consumption · RubyGems
    41 votes
72. The possibility of disrupting the normal operation of frontend using markdownUncontrolled Resource Consumption · low · HackerOne
    41 votes
73. DoS attacks utilizing camo.stream.highwebmedia.comUncontrolled Resource Consumption · medium · Chaturbate
    $40041 votes
74. Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesUncontrolled Resource Consumption · medium · Internet Bug Bounty
    $2,58040 votes
75. http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacksUncontrolled Resource Consumption · high · Internet Bug Bounty
    $3,49540 votes
76. Memory Leak in OCUtil.dll library in Desktop client can lead to DoSUncontrolled Resource Consumption · medium · Nextcloud
    $10040 votes
77. Type confusion in mrb_exc_set leading to memory corruptionUncontrolled Resource Consumption · critical · shopify-scripts
    40 votes
78. Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crashUncontrolled Resource Consumption · high · Internet Bug Bounty
    $3,64539 votes
79. No password length limit when creating a user as an administratorUncontrolled Resource Consumption · low · Nextcloud
    39 votes
80. %0A (New line) and limitness URL leads to DoS at all system [Main adress (https://www.acronis.com/)]Uncontrolled Resource Consumption · low · Acronis
    36 votes
81. Application DOS via specially crafted payload on 3d.cs.moneyUncontrolled Resource Consumption · medium · CS Money
    36 votes
82. Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After TeardownUncontrolled Resource Consumption · low · Tor
    $10035 votes
83. sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txsetUncontrolled Resource Consumption · high · Monero
    35 votes
84. DoS via Unbounded Memory Allocation in sendWebStream on Fastify v5.7.0+ leads to OOM crash when backpressure is ignoredUncontrolled Resource Consumption · Fastify
    35 votes
85. Unbounded memory growth with session handling in TLSv1.3Allocation of Resources Without Limits or Throttling · low · Internet Bug Bounty
    $49735 votes
86. Change contents of the careers iframe in https://corp.badoo.com/jobsUncontrolled Resource Consumption · Bumble
    35 votes
87. Memory leak that enables remote Denial of Service against applications processing TLS client certificatesUncontrolled Resource Consumption · medium · Node.js
    34 votes
88. Unauthenticated ?q= search query causes exponential pyparsing backtracking under a process-global lock in WeblateUncontrolled Resource Consumption · high · Weblate
    33 votes
89. HTTP/2 sessions never clean up after GOAWAY on invalid protocol errorsUncontrolled Resource Consumption · medium · Node.js
    33 votes
90. Memory leak in gem decode logic can allow attacker to take down Rubygems.org applicationUncontrolled Resource Consumption · medium · RubyGems
    33 votes
91. CVE-2024-49761: ReDoS vulnerability in REXMLUncontrolled Resource Consumption · medium · Internet Bug Bounty
    33 votes
92. [dubsmash] Long String in 'shoutout' Parameter Leading Internal server Error on Popular hastags , Community and User ProfileUncontrolled Resource Consumption · high · Reddit
    33 votes
93. Regular expression denial of service in ActiveRecord's PostgreSQL Money typeUncontrolled Resource Consumption · medium · Ruby on Rails
    33 votes
94. Client-Side Denial of Service (DoS) via Memory Exhaustion on Password Reset EndpointUncontrolled Resource Consumption · high · Khan Academy
    32 votes
95. Remote denial of service in HyperLedger FabricUncontrolled Resource Consumption · high · Linux Foundation Decentralized Trust
    32 votes
96. Chrome Extension is vulnerable to the self-DOS issues in case it process the security.txt with a big sizeUncontrolled Resource Consumption · low · Ed
    32 votes
97. Connector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacketUncontrolled Resource Consumption · medium · MariaDB
    31 votes
98. Uncontrolled Resource Consumption in any Markdown field using MermaidUncontrolled Resource Consumption · medium · GitLab
    31 votes
99. xmlrpc.php file is enable it will used for (DOS) and bruteforce attackUncontrolled Resource Consumption · high · FormAssembly
    31 votes
100. Crafted smart contract can take 1.5 minutes to execute due to inefficient CODESIZE implementationUncontrolled Resource Consumption · medium · Rootstock Labs
     30 votes