Massive DDoS Attack Against Dyn DNS Service Knocks Popular Sites Offline

UPDATE — How an army of million of hacked Internet-connected smart devices almost broke the Internet today. Cyber attacks are getting evil and worst nightmare for companies day-by-day, and the Distributed Denial of Service DDoS attack is one such attacks that cause a massive damage to any service...

CVE-2016-6391: Undefined Security Weakness

Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service traffic-processing outage via a crafted series of Common Industrial Protocol CIP requests, aka Bug ID CSCur69036...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2016-08271)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM WebSphere MQ, which can be exploited by remote attackers to cause a...

CVE-2016-0379

IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service channel outage by leveraging queue-manager rights...

CVE-2016-0379

IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service channel outage by leveraging queue-manager rights...

CVE-2016-0379: Undefined Security Weakness

IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service channel outage by leveraging queue-manager rights...

PT-2016-4173

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.5 before 7.5.0.7 IBM WebSphere MQ versions 8.0 before 8.0.0.5 Description The issue is related to the mishandling of protocol flows, which can be exploited by remote authenticated users with queue-manager rights to...

CVE-2016-6898

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...

CVE-2016-6898

CVE-2016-6898 affects Huawei E9000 rack servers’ Hyper Management Module (HMM). A XML External Entity (XXE) vulnerability exists in user-supplied XML documents, allowing remote authenticated users to read arbitrary files or cause a web service denial of service. Impact is described as partial con...

PT-2016-7156

Name of the Vulnerable Software and Affected Versions Huawei E9000 rack servers with software before V100R001C00SPC296 Description The issue is related to an XML external entity XXE vulnerability in the Hyper Management Module HMM. This allows remote authenticated users to read arbitrary files or...

CVE-2016-1472: Improper Input Validation

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

PT-2016-4820

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware prior to 1.0.1.1 Description The issue affects the web-based management interface, allowing remote attackers to cause a denial of service, resulting in an interface outage. This can be achieved vi...

CVE-2016-6355

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

CVE-2016-6355: Undefined Security Weakness

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

Design/Logic Flaw

platform/msmshared/devtree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service OS outage via a crafted application, aka Android internal bug...

Design/Logic Flaw

app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to cause a denial of service OS outage or buffer over-read via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275...

PT-2016-4057

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue allows attackers to cause a denial of service, resulting in an OS outage or buffer over-read, via a crafted application. Recommendations For Android...

PT-2016-3539

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 devices Description The issue is related to the Qualcomm bootloader in Android, where the platform/msm shared/dev tree.c file does not properly check the relationship between tags addresses and...

CVE-2016-1546

The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control windows...

CVE-2016-1546

The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control windows...