6389 matches found
The vulnerability in the TCP transmission rate limitation mechanism, known as TCP-rottling, in the software Connected Grid Network Management System and IoT Field Network Director allows a perpetrator to cause a service failure and restart the device.
The vulnerability in the TCP throughput rate-limiting mechanism of the Connected Grid Network Management System and IoT Field Network Director software involves insufficient protection for the throughput rate limit requiring additional memory. Exploiting this vulnerability allows a malicious acto...
Infogram: Bruteforcing Coupons
Hi, while i was fuzzing for an API endpoints i found this endpoint: https://infogram.com/api/discounts the first thing came on my mind is bruteforcing the coupon codes so i gave it a try and it worked! there's no rate limit on that endpoint so an attacker could use it to bruteforce the coupon cod...
Fake Magazine Cover Script SQL Injection Vulnerability
Fake Magazine Cover Script is a script for creating magazine cover websites. Fake Magazine Cover Script suffers from a SQL injection vulnerability. An attacker can perform SQL injection via the rate.php value parameter or the content.php id parameter...
CVE-2017-15987
Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...
Oracle Linux 6 : ntp (ELSA-2017-3071)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3071 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer...
Uber: No rate limiting on https://biz.uber.com/confirm allowed an attacker to join arbitrary business.uber.com accounts
A lack of rate limiting on the "/confirm" endpoint made it possible for an attacker to add themselves to arbitrary business.uber.com accounts by brute forcing confirmation codes. If they were able to successfully brute force the correct confirmation code, this would allow an attacker to take ride...
CVE-2017-14937
The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access SA data to the internal CAN bus or the OBD connector. This affects the airbag control units aka pyrotechnical control units or PCUs of unspecified passenger vehicles manufactured in 2014 or...
Rate Me Cross-Site Scripting Vulnerability
Rate Me is a rating script written in PHP. A cross-site scripting vulnerability exists in the rate-me.php file in Rate Me version 1.0. A remote attacker can exploit this vulnerability to inject JavaScript code...
Infogram: No Rate Limit on account deletion request(Leads to huge email flooding/email bombing)
Dear sir, At first,i want to say that this sensitive action definitely should be set with rate limit. Note:-This is about huge bombing/brute force on any endpoints. Vulnerability:- -No rate limit has been set for generating account deletion emails for accounts on above selected domain. -As there ...
Infogram: No Rate limit on Password Reset Function
Hello Infogram Security Team Description:- I have identified that when resetting the password, the request has no rate limit which then can be used to brute force through one request. Which can be annoying to the infogram users. Steps to reproduce:- Request for password reset link. Catch the abov...
Design/Logic Flaw
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...
CVE-2017-15384
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...
CVE-2017-15384
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...
CVE-2017-15384
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...
CVE-2017-15384
Rate Me 1.0’s rate-me.php is vulnerable to cross-site scripting via the id parameter in a rate action. The provided documents confirm an XSS condition but do not specify affected versions beyond Rate Me 1.0, nor provide exploitation details, impact scope, or remediation guidance.
CVE-2017-15384: Improper Neutralization of Input During Web Page Generation
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...
GNU Libextractor Denial of Service Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A denial of service vulnerability exists in the 'EXTRACTORwavextractmethod' method of the wavextractor.c file in GNU Libextractor version 1.4, which stems from the program failing to detect the...
CVE-2017-15266
In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTORwavextractmethod in wavextractor.c via a zero sample rate...