233 matches found
HackerOne: Flawed account creation process allows registration of usernames corresponding to existing file names
As requested by Alex: "You mentioned in the report to contact you on this account instead. Is this the email address you prefer to use for payment? If so, would you mind resubmitting the issue from this account so we can issue a payout to the proper account?" ---------- The account creation proce...
HackerOne: Flawed account creation process allows registration of usernames corresponding to existing file names
The account creation process allows to set up account names corresponding to names of server ressources, e.g. I just successfully created an account robots.txt which results in a profile path of https://hackerone.com/robots.txt and results in an bugged account as accessing account settings etc is...
DSA-2758-1 python-django - denial of service
Bulletin has no description...
JVN#24713981: PHP OpenID Library vulnerable to XML external entity injection
The PHP OpenID Library contains an XML external entity injection vulnerability. Impact When processing specially crafted XRDS data, information on the server may be disclosed or server resources may be consumed excessively. Solution Apply a Patch The source code in the repository has been fixed...
robots to the site of the hazard-vulnerability warning-the black bar safety net
SEO（search engine optimization）many programmers change jobs to do this, but the hackers seriously or bothered to do this! Technical people firmly believe that art will speak, as long as the user experience is good, really can give the user to bring the user to the desired resources, this is the...
Sigma Portal - ShowObjectPicture.aspx Denial of Service
Sigma Portal - ShowObjectPicture.aspx Denial of Service source: https://www.securityfocus.com/bid/45588/info Sigma Portal is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the server to consume excessive resources, denying service to legitimate users...
Web Crawler : Web Application Crawler - New Release
Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...
IBM OmniFind Crawler - Denial of Service
Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of service. The same site will be...
Mandriva Update for samba MDKSA-2007:034 (samba)
Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:034 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Zope 2.11.2 - PythonScript Multiple Remote Denial of Service Vulnerabilities
Zope 2.11.2 - PythonScript Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/32267/info Zope is prone to multiple remote denial-of-service vulnerabilities. Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive...
Targem Games Battle Mages 1.0 - Remote Denial of Service
source: https://www.securityfocus.com/bid/9849/info The Battle Mages game server has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when the server receives incomplete client data. Specifically the affected server will attempt to rea...
Half-Life Server 1.13.1 - New Player Flood Denial of Service
Half-Life Server 1.13.1 - New Player Flood Denial of Service source: https://www.securityfocus.com/bid/5076/info Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software...
