1263 matches found
CVE-2021-36630
The CVE-2021-36630 entry describes a DDOS reflection amplification vulnerability in the eAut module of Ruckus Wireless SmartZone controllers, enabling remote attackers to conduct denial-of-service via crafted requests. The affected component is the eAut module within SmartZone; the underlying cau...
CVE-2021-36630
DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request...
PT-2023-12294 · Ruckus Wireless · Ruckus Wireless Smartzone Controller
Name of the Vulnerable Software and Affected Versions: Ruckus Wireless SmartZone controller affected versions not specified Description: The issue is related to a DDOS reflection amplification vulnerability in the eAut module of the Ruckus Wireless SmartZone controller. This vulnerability allows...
friedmanamplification.com Open Redirect vulnerability OBB-3138325
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1110)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1134)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 Note that Tenable Network...
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1110)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 Note that Tenable Network...
CVE-2014-125036 drybjed ansible-ntp main.yml amplification
A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local...
Ubuntu 20.04 LTS / 22.04 LTS : Pillow vulnerabilities (USN-5777-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5777-1 advisory. It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An...
Existential Risk and the Fermi Paradox
We know that complexity is the worst enemy of security, because it makes attack easier and defense harder. This becomes catastrophic as the effects of that attack become greater. In A Hackers Mind coming in February 2023, I write: Our societal systems, in general, may have grown fairer and more...
CVE-2022-42982
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long tens of kBs and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks...
CVE-2022-42982
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long tens of kBs and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks...
CVE-2022-42982
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long tens of kBs and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks...
CVE-2022-42982
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long tens of kBs and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks...
PT-2022-26692 · Bkg · Bkg Professional Ntripcaster
Name of the Vulnerable Software and Affected Versions: BKG Professional NtripCaster version 2.0.39 Description: The issue allows querying information over the UDP protocol without authentication. The NTRIP sourcetable, which is typically quite long, can be requested with a small packet, presentin...
CVE-2022-42982
CVE-2022-42982 affects BKG Professional NtripCaster 2.0.39. The issue allows querying the NTRIP sourcetable over UDP without authentication, enabling a potential UDP amplification vector because the sourcetable is long yet can be retrieved with a small packet. Normally, UDP-only data is authentic...
GHSA-M2VV-5VJ5-2HM7 Pillow vulnerable to Data Amplification attack.
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...
