Home/ MITRE Matrix/ Impact/ T1499.004

T1499.004Application or System Exploitation

T1499.004 — Application or System Exploitation is a MITRE ATT&CK technique in the Impact tactic. Clankerusecase tracks 10 detection use cases covering it and 6 threat-intel articles citing it.

Impact

View on the matrix → Filter Detection Library MITRE official spec ↗

10Use cases

6Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1499 · Endpoint Denial of Service

Use cases covering this technique (10)

Splunk DOS Via Dump SPL Command ESCU actions · hunting P Splunk DOS via printf search function ESCU actions · hunting P [LLM] Vulnerable node-tar (<=7.5.18) present on hosts — CVE-2026-59873 decompression-bomb DoS exposure Bespoke weapon · hunting DSP [LLM] node.js process rapidly writing multi-GB file during archive extraction (CVE-2026-59873 gzip-bomb impact) Bespoke actions · hunting DSPCS [LLM] YesWiki CalcField ReDoS/stack-overflow DoS — deeply nested parentheses payload Bespoke actions · alerting SΣP [LLM] Apache Camel gridfs.* control-header injection inbound (CVE-2026-48204 exploit) Bespoke exploit · hunting SΣPDD [LLM] Exposure: hosts running python-multipart ≤0.0.6 / FastAPI ≤0.109.0 vulnerable to CVE-2024-24762 ReDoS Bespoke exploit · hunting DSP [LLM] CVE-2024-24762 ReDoS exploitation: overlong Content-Type header / stalled POST to FastAPI form endpoint Bespoke actions · hunting SP [LLM] REDoS exploitation of ua-parser-js via space-padded Xiaomi User-Agent (CVE-2020-7733) Bespoke exploit · hunting SΣP [LLM] ReDoS in ms time-parser: oversized web request body with multi-second server processing time Bespoke exploit · hunting SΣP

Articles citing this technique (6)

crit [GHSA / CRITICAL] CVE-2026-59873: node-tar: Decompression/parse DoS via unlimited input art-136

crit [GHSA / CRITICAL] CVE-2026-52778: YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service art-210

crit [GHSA / CRITICAL] CVE-2026-48204: Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection art-245

crit A denial of service Regex breaks FastAPI security art-1273

crit Regular Expression Denial of Service (REDoS) in UAParser.js art-3274

high Snyking in - regular expression denial of service vulnerability exploit in the ms package art-3548