PT-2017-17157

Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue exists in the form of a cross-site scripting XSS attack. This attack can be executed through the index.php endpoint with specific parameters, including disconnect=1 and msgNotif containing...

Product update: Virtuozzo 6.0 Update 12 Hotfix 5 (6.0.12-3672)

The new packages for Virtuozzo 6.0.12 introducing a usability bug fix. Vulnerability id: PSBM-60976 Lack of VNC client capabilities check on host could result in unsupported data being sent to VNC client leading to a disconnection from host with error...

How to configure a session disconnect timer in XenApp 7.x

To set up a time limit so that any session in a Disconnected state is logged off after a predetermined amount of time...

Provisioning Server 7.9 -- PVS Target Devices drop off network after login

Having logged into a PVS Target Device we see the Target Device disconnect from PVS Console. The Target Device then becomes unresponsive to pings and the machine hangs and sits in an unresponsive state...

Apple Mac OS X 10.12/iOS 10 SecureTransport SSL handshake OCSP MiTM and DoS

Exploit for macOS platform in category dos / poc Apple macOS 10.12/iOS 10 SecureTransport SSL handshake OCSP MiTM and DoS --- 0. Description ---- The latest macOS and iOS have weak OCSP validation process which allow attacker to send OCSP requests up to 200k in name of victim during MiTM attack...

Google Chrome Access Restriction Bypass

The vulnerability in the WebKit/Source/core/loader/FrameLoader.cpp file of the Google Chrome browser’s Blink component is related to the continued operation of the frame navigation mechanism during the disconnection of the DocumentLoader object. Exploiting this vulnerability could allow a malicio...

DEBIAN-CVE-2016-5400

Memory leak in the airspyprobe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service memory consumption via a crafted USB device that emulates many VFLTYPESDR or VFLTYPESUBDEV devices and performs many...

CVE-2016-5400

Memory leak in the airspyprobe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service memory consumption via a crafted USB device that emulates many VFLTYPESDR or VFLTYPESUBDEV devices and performs many...

July 12, 2016 — KB3172985 (OS Build 10586.494)

None None...

Cisco IOS DoS

Cisco IOS software contains a vulnerability in the Multicast Source Discovery Protocol MSDP, which allows a remote attacker to trigger a “disconnect” condition on a router by sending specially crafted MSDP packets...

ICA Session Gets Disconnected When the Web Session Times Out

ICA session gets disconnected when the web session times out...

Zomato: Twitter Disconnect CSRF

Hi Using this CSRF vulnerability one could disconnect Twitter account from their profiles. Vulnerable request GET /php/disconnecttwitterprofile.php HTTP/1.1 Host: www.zomato.com Connection: keep-alive Accept: text/html, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT...

Shopify: Twitter Disconnect CSRF

Hello, Using this CSRF vulnerability one could disconnect twitter account from their profiles. Vulnerable request GET /auth/twitter/disconnect HTTP/1.1 Host: twitter-commerce.shopifyapps.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.11; rv:43.0 Gecko/20100101 Firefox/43.0 Accept:...

CVE-2015-4943: Undefined Security Weakness

IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service MQXR service crash via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942...

PT-2015-7961

Уязвимость загружаемого модуля drivers/staging/media/lirc/lirc imon.ko ядра операционной системы Linux связана с взаимной блокировкой в реализации обработчика imon probe. Эксплуатация уязвимости может позволить нарушителю вызвать отказ от обслуживания операционной системы при подключении устройст...

Cisco Wireless LAN Controller Client Disconnect Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A disconnect vulnerability exists in the Cisco Wireless LAN Controller client. A remote attacker can exploit this vulnerability to...

Cisco Wireless LAN Controller RADIUS Implementation Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller product. The RADIUS implementation in Cisco Wireless LAN Controller fails to perform sufficient input validation on RADIUS Disconnect-Request packets, allowing remote attackers to exploit a vulnerability by submitting a special request to...

CVE-2015-6302

The RADIUS functionality on Cisco Wireless LAN Controller WLC devices with software 7.0250.0 and 7.0252.0 allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419...

Design/Logic Flaw

The RADIUS functionality on Cisco Wireless LAN Controller WLC devices with software 7.0250.0 and 7.0252.0 allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419...

CVE-2015-6302: Undefined Security Weakness

The RADIUS functionality on Cisco Wireless LAN Controller WLC devices with software 7.0250.0 and 7.0252.0 allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419...