ASUS Asus ZenFone 3 Max Command Injection Vulnerability

The ASUS Asus ZenFone 3 Max is an Android-based smartphone from Asus Taiwan, China. A security vulnerability exists in ASUS ZenFone 3 Max build fingerprint asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys. An attacker could exploit the vulnerability to take...

Dashlane: Throttling Bypass - ws1.dashlane.com

Description The host at ws1.dashlane.com throttles requests based on the IP address of the user after a certain amount of repeated requests. By adding the X-Forwarded-For header, an attacker can bypass the throttling completely, rendering the security measure ineffective against DOS attacks. Proo...