The vulnerability of the mDNS protocol in the Cisco IOS XE operating system for Cisco Catalyst 9000 Series network devices allows a attacker to induce a service failure.

The vulnerability of the mDNS protocol in Cisco IOS XE operating systems and Cisco Catalyst 9000 Series networking devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE operating systems of Cisco Catalyst 9000 Series network devices allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

Node.js: Potential HTTP Request Smuggling in nodejs

Summary: Potential HTTP Request Smuggling exists in nodejs. Attacker can use two same header field make TE-TE HTTP Request Smuggling attack. Description: nodejs allow same header field in a http request. for example, we can send two Transfer-Encoding header field, even if one of them is false...

The vulnerability of the wireless data transmission technology for the Cisco IOS operating system on Cisco 800 Series Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers allows a intruder to gain unauthorized access to protected information or cause service failures.

The vulnerability of the wireless data transmission technology for the Cisco IOS operating system on Cisco 800 Series Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers is related to privilege management errors. Exploiting this vulnerability could allow an attacke...

The vulnerability of the RESTCONF and NETCONF-YANG protocols implemented in the Cisco IOS XE operating system allows a attacker to cause service interruptions.

The vulnerability of the RESTCONF and NETCONF-YANG protocols implemented by the Cisco IOS XE operating system is related to errors in pointer arithmetic. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

Denial of Service Vulnerability in Schneider PLC-M580

The M580, a PLC in Schneider's Modicon PLC family, is Schneider Electric's first high-end integrated controller built for the Industrial Internet of Things architecture. A denial of service vulnerability exists in the Schneider PLC-M580, which can be exploited by an attacker to cause the PLC's...

The vulnerability of Intel Wireless for Open Source microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of Intel Wireless for Open Source microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Ethernet OAM component of the JunOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the JunOS operating system’s Ethernet component is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Internet Explorer and Sailfish Browser script handlers, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Internet Explorer script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

The vulnerability of the sf_write_int function in the libsndfile library, which allows a hacker to cause a service failure.

The vulnerability of the sfwriteint function in the libsndfile library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the NDP Proxy component in the JunOS operating system allows a hacker to trigger a maintenance failure.

The vulnerability of the NDP Proxy component in the JunOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

COVID-19 and Acedia

Note: This isnt my usual essay topic. Still, I want to put it on my blog. Six months into the pandemic with no end in sight, many of us have been feeling a sense of unease that goes beyond anxiety or distress. Its a nameless feeling that somehow makes it hard to go on with even the nice things we...

Twitter removes Iranian accounts disrupting US presidential debate

By Deeba Ahmed The account holders were chattering about disrupting the first US Presidential Debate on Tuesday. Its only been a month when Microsoft warned about possible attempts of state-sponsored cybercriminals, particularly Iranian hackers, to disrupt the upcoming US presidential elections...

The vulnerability of the BGP Flowspec implementation in the JunOS operating system allows a perpetrator to cause a service failure.

The vulnerability of the BGP Flowspec implementation on the JunOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

Denial of Service Vulnerability in Foxit PDF Reader

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Two major flight tracking services hit by crippling cyberattacks

By Waqas It is still unclear who is behind these cyberattacks however both Flightradar24 and PlaneFinder suffered major service disruption after the attacks. This is a post from HackRead.com Read the original post: Two major flight tracking services hit by crippling cyberattacks...

The vulnerability of the nghttp2 library, related to errors occurring when using allocated memory during the processing of HTTP/2 SETTINGS, allows a attacker to cause a service failure.

The vulnerability of the nghttp2 library is related to errors that occur when using allocated memory during the processing of HTTP/2 SETTINGS packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending numerous HTTP/2 SETTINGS packets...

The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the insufficient calculation of the password hash. This allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient calculation of the password hash. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...