Design/Logic Flaw

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

CVE-2016-8275 affects Huawei AnyOffice, specifically the AnyOffice EMM component on the V200R006C00 platform. The vulnerability allows an authenticated remote attacker to cause a denial of service by uploading an XML bomb, enabling partial availability impact as described in the NVD entry. The is...

Huawei Flybox B660 - Cross-Site Request Forgery (2)

Document Title: =============== Huawei Flybox B660 - POST SMS CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2026 Release Date: ============= 2017-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 2026...

Huawei AnyOffice XML Bomb Vulnerability

AnyOffice provides Enterprise Mobile Management EMM function to manage the whole life cycle of mobile devices. An XML Bomb vulnerability exists in AnyOffice EMM, which can be exploited by an authenticated network attacker to cause a denial of service by uploading an XML bomb...

CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

PYSEC-2017-87

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

Design/Logic Flaw

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

DEBIAN-CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

Decompression Bomb Testing

Decompression Bomb Testing A decompression bomb is a file designed to crash or render useless the program or system reading it, i.e. a denial of service. The files in this project can be used to test whether an application is vulnerable to this type of attack. A zip bomb, also known as a zip of...

WSSAT - Web Service Security Assessment Tool

WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it performs both static and dynamic tests again...

Security Advisory - XML Bomb Vulnerability in AnyOffice

AnyOffice Enterprise Mobile Management EMM is a module of the AnyOffice, which provides the mobile terminal management function. The XML Bomb vulnerability in the AnyOffice EMM could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

HTTP2. 0 Protocol is aeration 4 high-risk vulnerabilities can cause server to crash-bug warning-the black bar safety net

! If you think that HTTP2. 0 Protocol than the standard HTTP Hypertext Transfer Protocol more secure, then you're wrong. Researchers spent 4 months in HTTP2. 0 Protocol found 4 vulnerabilities that! Last 2 month, Google put their SPDY project bundled into HTTP2. 0, intended to strengthen the page...

4 Flaws hit HTTP/2 Protocol that could allow Hackers to Disrupt Servers

If you think that the HTTP/2 protocol is more secure than the standard HTTP Hypertext Transfer Protocol, then you might be wrong, as it took researchers just four months to discover four flaws in the HTTP/2 protocol. HTTP/2 was launched properly just in May last year after Google bundled its SPDY...

Multiples Nexon Games - Unquoted Path Privilege Escalation

Multiples Nexon Games - Unquoted Path Privilege Escalation ----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author :...

Nexon Games Privilege Escalation

----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.nexon.net/...

Nexon Games - Unquoted Path Privilege Escalation

Exploit for windows platform in category local exploits ----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyr...