PT-2019-13141 · Nats · Nats Server

Name of the Vulnerable Software and Affected Versions: NATS Server versions prior to 2.2.0 Description: The issue is caused by an integer overflow that allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, the attacker must first authenticate. Th...

Adventures in Video Conferencing Part 1: The Wild World of WebRTC

Posted by Natalie Silvanovich, Project Zero Over the past five years, video conferencing support in websites and applications has exploded. Facebook, WhatsApp, FaceTime and Signal are just a few of the many ways that users can make audio and video calls across networks. While a lot of research ha...

inescapablebondage.com XSS vulnerability

Vulnerable URL: http://inescapablebondage.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3EMzAwMDA4My4xLjMuMy4xLjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

[SECURITY] Fedora 19 Update: miredo-1.2.5-4.fc19

Miredo is an implementation of the "Teredo: Tunneling IPv6 over UDP through NATs" proposed Internet standard RFC4380. It can serve either as a Teredo client, a stand-alone Teredo relay, or a Teredo server, please install the miredo-server or miredo-client appropriately. It is meant to provide IPv...

[Full-disclosure] ICMP attacks against TCP: Conclusions

Folks, My posts to this list have tried to show how easy it is to perform ICMP attacks against TCP. The attacks are blind, so the attacker does not need to be a "man in the middle" to perform then. The typical number of packets required to perform any of these attacks is about 16000 in many cases...