754 matches found
What is Ping of Death Assault?
Ping of death is a strategy for DoS Denial of Service assault. It’s an attack-type that objectifies the ICMP Internet Control Message Protocol and the TCP Transmission Control Protocol, and is quite possibly the most undermining of all ICMP attacks. The ping of death attack is otherwise called a...
Regular Expression Denial of Service (ReDoS)
Overview forms is a libary that allows you to create, parse, and validate forms Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via email validation. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessib...
Reddit: No Rate Limit on redditgifts gift when Adding Comment
Hi team, I hope this report should not be closed as INFORMATIVE Summary: The add comment endpoint was improperly rate-limited so the potential attacker could post a large number of comments, overloading the server . Description: The add comment endpoint has a speed limit, but the number is set to...
llvm:clang-fuzzer: Use-of-uninitialized-value in clang::getConstructorInfo
Detailed Report: https://oss-fuzz.com/testcase?key=6073296685760512 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::getConstructorInfo...
CVE-2021-21359
TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to ...
CVE-2021-21359
TYPO3 core vulnerability CVE-2021-21359 affects TYPO3 CMS before 9.5.25, 10.4.14, and 11.1.1. When a user requests invalid or non-existing resources via HTTP, the page error handler could retrieve content to display from another page, causing the application to call itself recursively and potenti...
Unspecified Vulnerability in Apache OpenMeetings
Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant's desktop and more. Apache OpenMeetings suffers from a security vulnerability that stems from the...
RUSTSEC-2021-0041 Denial of service through parsing payloads with too big exponent
The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...
CVE-2021-27576
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0...
Code injection
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0...
CVE-2021-27576 Apache OpenMeetings: bandwidth can be overloaded with public web service
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0...
CVE-2021-27576
CVE-2021-27576 concerns Apache OpenMeetings where the NetTest web service can be abused to overload the server’s bandwidth, resulting in a denial-of-service. The issue is described as a remote DoS with the NetTest component and is noted to have been addressed in Apache OpenMeetings 6.0.0. Public ...
Apache OpenMeetings security vulnerabilities
Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant's desktop and more. Apache OpenMeetings suffers from a security vulnerability that stems from the...
CVE-2021-27576: Undefined Security Weakness
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0...
PT-2021-17517
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions prior to 6.0.0 Description The NetTest web service can be used to overload the bandwidth of an Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0. Recommendations For versions prior t...
Regular Expression Denial Of Service (ReDoS)
three is vulnerable to regular expression denial of service. The usage of an insecure regex in setStyle function in color.js allows an attacker to cause excessive consumption of CPU resources, potentially resulting in an application crash...
CVE-2021-22976
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebSocket requests with JSON payloads, an unusually large number of parameters can cause excessive CPU...
Denial of Service in uap-core
Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-core to = v0.11...
Juniper Networks Junos OS QFX Security Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS QFX, which can be exploited by an attacker to trigger a denial of service via ...