Home/ MITRE Matrix/ Impact/ T1499.004

T1499.004Application or System Exploitation

T1499.004 — Application or System Exploitation is a MITRE ATT&CK technique in the Impact tactic. Clankerusecase tracks 9 detection use cases covering it and 5 threat-intel articles citing it.

Impact

View on the matrix → Filter Detection Library MITRE official spec ↗

9Use cases

5Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1499 · Endpoint Denial of Service

Use cases covering this technique (9)

Splunk DOS Via Dump SPL Command ESCU actions · hunting P Splunk DOS via printf search function ESCU actions · hunting P [LLM] Vulnerable node-tar (<=7.5.18) present on hosts — CVE-2026-59873 decompression-bomb DoS exposure Bespoke weapon · hunting DSP [LLM] node.js process rapidly writing multi-GB file during archive extraction (CVE-2026-59873 gzip-bomb impact) Bespoke actions · hunting DSPCS [LLM] YesWiki CalcField ReDoS/stack-overflow DoS — deeply nested parentheses payload Bespoke actions · alerting SΣP [LLM] Exposure: hosts running python-multipart ≤0.0.6 / FastAPI ≤0.109.0 vulnerable to CVE-2024-24762 ReDoS Bespoke exploit · hunting DSP [LLM] CVE-2024-24762 ReDoS exploitation: overlong Content-Type header / stalled POST to FastAPI form endpoint Bespoke actions · hunting SP [LLM] REDoS exploitation of ua-parser-js via space-padded Xiaomi User-Agent (CVE-2020-7733) Bespoke exploit · hunting SΣP [LLM] ReDoS in ms time-parser: oversized web request body with multi-second server processing time Bespoke exploit · hunting SΣP

Articles citing this technique (5)

crit [GHSA / CRITICAL] CVE-2026-59873: node-tar: Decompression/parse DoS via unlimited input art-241

crit [GHSA / CRITICAL] CVE-2026-52778: YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service art-305

crit A denial of service Regex breaks FastAPI security art-1296

crit Regular Expression Denial of Service (REDoS) in UAParser.js art-3297

high Snyking in - regular expression denial of service vulnerability exploit in the ms package art-3571