DoS on PayPal via web cache poisoning Analysed #622122 Valid PayPal Denial of Service Medium 2019-10-23 $9,700 851 profile-picture name parameter with large value lead to DoS for other users and programs on the platform Analysed #764434 Valid HackerOne Denial of Service Medium 2020-03-25 – 475 Denial of service to WP-JSON API by cache poisoning the CORS allow origin header Analysed #591302 Valid Automattic Denial of Service Medium 2020-04-16 – 405 [Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailable Analysed #210779 Valid X / xAI Denial of Service – 2019-04-25 – 323 Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite) #170532 No longer public LocalTapiola Denial of Service – 2016-12-15 $18,000 264 Denial of service via cache poisoning Analysed #409370 Valid HackerOne Denial of Service Medium 2018-12-22 $2,500 253 Static files on HackerOne.com can be made inaccessible through Cache Poisoning attack Analysed #1181946 Valid HackerOne Denial of Service Medium 2021-12-22 – 228 Uploading large payload on domain instructions causes server-side DoS Analysed #887321 Valid HackerOne Denial of Service Medium 2020-06-20 $2,500 210 Bypass password reset rate limit protection at moneybird.com/passwords Analysed #723974 Valid Moneybird Denial of Service High 2019-12-22 – 164 xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS) #752073 No longer public Nord Security Denial of Service – 2020-01-06 – 162 Node disk DOS by writing to container /etc/hosts Analysed #867699 Valid Kubernetes Denial of Service Medium 2020-07-22 $1,000 161 Enable 2FA without verifying the email Analysed #649533 Valid Moneybird Denial of Service Medium 2019-10-25 – 149 DoS on the Issue page by exploiting Mermaid. Analysed #470067 Valid GitLab Denial of Service Medium 2019-05-13 $3,000 145 url that twitter mobile site can not load Analysed #500686 Valid X / xAI Denial of Service Low 2019-03-19 $1,120 142 character limitation bypass can lead to DoS on Twitter App and 500 Internal Server Error Analysed #819088 Valid X / xAI Denial of Service Medium 2020-05-06 – 141 Multiple endpoints are vulnerable to XML External Entity injection (XXE) #72272 No longer public Pornhub Denial of Service – – $2,500 138 a very long name in hey.com can prevent anyone from accessing their contacts and probably can cause denial of service Analysed #1018037 Valid Basecamp Denial of Service High 2020-11-10 $1,000 132 Permanent DoS with one click. Analysed #975827 Valid Automattic Denial of Service Medium 2020-11-19 – 127 DOS of RSKJ server Analysed #2105808 Valid Rootstock Labs Denial of Service High 2025-06-13 $5,000 121 ActiveStorage throws exception when using whitespace as filename, may lead to denial of service of multiple pages Analysed #713407 Valid HackerOne Denial of Service Medium 2019-12-13 – 111 Cache Poisoning DoS on downloads.exodus.com Analysed #1173153 Valid Exodus Denial of Service High 2021-12-22 – 110 Denial of Service via Hyperlinks in Posts Analysed #1077136 Valid Slack Denial of Service Medium 2021-10-03 $1,500 109 Unsufficent input verification leads to DoS and resource consumption Analysed #2818147 Valid Sorare Denial of Service Low 2025-02-26 $300 108 Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint Analysed #3400140 Valid Discourse Denial of Service High 2026-06-30 $1,024 98 Critical Deadlock Vulnerability in Monero RPC Leading to Complete Node Paralysis Analysed #3307874 Valid Monero Denial of Service Critical 2026-05-06 – 97 Attacker with an Old account might still be able to DoS ctf.hacker101.com by sending a Crafted request Analysed #861170 Valid HackerOne Denial of Service Low 2020-05-25 – 97 Denial of Service | twitter.com & mobile.twitter.com Analysed #903740 Valid X / xAI Denial of Service Medium 2020-09-02 $1,120 89 Crafted smart contract can take 8 minutes to execute due to bug in modexp precompile. Analysed #2412583 Valid Rootstock Labs Denial of Service High 2025-06-13 – 85 Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource Exhaustion Analysed #3058919 Valid Discourse Denial of Service High 2025-10-18 – 84 DoS attack via comment on Issue Analysed #557154 Valid GitLab Denial of Service Low 2019-11-21 $1,000 84 CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize() Analysed #2795558 Valid Internet Bug Bounty Denial of Service Medium 2024-11-30 $2,162 83 Cache poisoning Denial of Service affecting assets.gitlab-static.net Analysed #1160407 Valid GitLab Denial of Service High 2021-12-22 – 83 Denial Of Service (Out Of Memory) on Updating Bounty Table [Urgent] Analysed #1043372 Valid HackerOne Denial of Service Low 2021-02-02 – 83 https://themes.shopify.com::: Host header web cache poisoning lead to DoS Analysed #1096609 Valid Shopify Denial of Service Medium 2021-04-08 $2,900 82 TLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and FD Leak Analysed #3473882 Valid Node.js Denial of Service Medium 2026-02-12 – 81 [mijn.werkenbijdefensie.nl] Denial of service occurs due to lack of email length confirmation #920926 No longer public Radancy Denial of Service – 2020-07-23 – 79 High resource consumption by insufficient sanitization of forum threads pagination Analysed #1916400 Valid Flickr Denial of Service Medium 2025-11-24 $479 75 Unauthenticated WordPress Database Repair DoS #2786591 N/A WordPress Denial of Service High 2024-10-18 – 70 [www.werkenbijbakertilly.nl] Denial of service due to incorrect server return can result in total denial of service. #892615 No longer public Radancy Denial of Service – 2020-07-10 – 67 Denial of Service [Chrome] Analysed #921286 Valid X / xAI Denial of Service Medium 2020-07-24 $560 66 Pixel flood attack Analysed #390 Valid HackerOne Denial of Service – 2013-11-30 $500 66 "Assertion failed" in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash Analysed #2319584 Valid Node.js Denial of Service High 2024-04-08 – 65 DOS: taking down a 1k users Gitlab EE instance or multiple Sidekiq instances by importing a malicious repo from a Github EE self-hosted server Analysed #2499070 Valid GitLab Denial of Service Medium 2024-10-09 $2,300 64 Authorization issue in Google G Suite allows DoS through HTTP redirect Analysed #191196 Valid Uber Denial of Service High 2017-02-09 – 62 [CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text Analysed #2792776 Valid Internet Bug Bounty Denial of Service Low 2024-11-28 $505 60 CVE-2024-34750 Apache Tomcat DoS vulnerability in HTTP/2 connector Analysed #2586226 Valid Internet Bug Bounty Denial of Service High 2024-07-05 $4,920 60 DoS: type confusion in mrb_no_method_error Analysed #181871 Valid shopify-scripts Denial of Service Critical 2017-03-01 – 60 CVE-2025-5399: WebSocket endless loop Analysed #3168039 Valid curl Denial of Service Low 2025-06-04 – 58 Memory Leak in libcurl via Location Header Handling (CWE-770) #3158093 Spam curl Denial of Service High 2025-05-22 – 55 [api.tumblr.com] Denial of Service by cookies manipulation Analysed #1005421 Valid Automattic Denial of Service Medium 2020-11-29 – 55