denialdisk·Oct 23Hunting Thread Exhaustion: Ischemia for HTTP/1.1 Partial-Entity HoldsHowdy cowboys! This write-up is a quick note about how and why I developed this tool. Although I’ve been using a version of this internally…
Sahadat Husain·Oct 8Image decompression bombs: a 400-megapixel upload on a small serverWhat a huge image really costs in memory, how to tell an attack from a real photo, and how to process one in about 1 GiB, measured.
Bholay Nath Singh·Sep 4PNG Decompression Bomb: How a Tiny Image Can Bring Down a Document AI PipelineWhen we talk about security testing an AI application, our first thoughts usually go towards things like prompt injection, data leakage…
ahmad kabiri·Aug 22Why Rate Limiting Is Not Enough Against DoS AttacksThree kinds of DoS vulnerability, and why rate limiting is not enough.
MEHDI KR·Aug 18Tales of a CSDoS: How a Single Malformed JSON String Broke an Entire Event PlatformBy Mehdi (MadaraHaxor)
marius-ciclistu·Aug 17The Hidden Cost of “Fast” Rejections: Why Framework Boot Time Is Sinking Your InfrastructureTo underline why fast boot time is important and why PHP-Framework is optimized to accomplish that (see also this…
CyberPodcast·Jul 14CVE-2026–10116: Denial of Service in Open5GS Authentication Timer HandlingA denial-of-service vulnerability in Open5GS’s UE-authentications endpoint lets a remote attacker disrupt authentication services by…
CyberPodcast·Jul 13CVE-2026–10114: Out-of-Bounds Write in Open5GS SCP Info HandlerA memory corruption vulnerability in Open5GS, discovered in the same NF-profile parser component affected by a related denial-of-service…
CyberPodcast·Jul 12Here’s your Medium article on CVE-2026–10113CVE-2026–10113: Denial of Service Flaw Hits Open5GS’s 5G Core Parser
