CVE-2017-7672

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12...

WakaTime: No rate limit when creating new goals [https://wakatime.com/goals]

Hi there, I was testing and found out that there's no rate limit on goals section https://wakatime.com/goals that means you can create multiple goals in a sec, which would lead to server crash since there's no limit per request that a user can make. I made at least 100 request, and still got 200 ...

Denial Of Service (DoS) Via URLValidator

Apache struts2 is vulnerable to denial-of-service DoS attacks. It does not trim when validating input URL in form files. If built-in URLValidator is used, it is possible for attackers to prepare a special URL which will be used to overload server process when performing validation of the URL,...

HackerOne: Denial of service in report view.

Hello Team! First of all thank you for acknowledging my feature request, I know it will help a lot of users. Description: ========== I just wanted to report a potential vulnerability on the report view functionality. For obvious reasons I'm using my sandboxed team on an alternate account to test...

Yokogawa FAST/TOOLS XML External Entity

OVERVIEW Timur Yunusov, Alexey Osipov, and Ilya Karpov of Positive Technologies Inc. have identified an XML external entity processing vulnerability in the Yokogawa FAST/TOOLS application. Yokogawa has produced a service pack that mitigates this vulnerability. AFFECTED PRODUCTS The following...

SA-CONTRIB-2014-017- Image Resize Filter - Denial of Service (DOS)

This module enables you to resize images based on the HTML contents of a post. Images with specified height and width properties that differ from the original image result in a resized image being created. The module doesn't limit the number of resized images per post or user, which could allow a...

FBI sponsored Ragebooter DDoS attack service

A website that can be described as "DDoS for hire" is perfectly legitimate, according to the owner. Malicious sites that offer attack services are not strangers on the Internet, but web sites sponsored by law enforcement is another story altogether. Ragebooter, is one of many sites that accepts...

Seditio 165 SQL Injection / Denial Of Service

cs Seditio 165 from seditio-eklenti.com Denial Of Service exploit by AkaStep. We will exploit Sql injection using this exploit and as result we will cause Denial of Service. Mysql server will go down or will overloaded +server will get overloadedHigh CPU Load. // Vuln Discovered By AkaStep +...

The Hacker's Choice releases SSL DOS Tool

The Hacker's Choice releases SSL DOS Tool German hacker group "The Hacker's Choice" officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet. Establishing a secure SSL connection requires 15x more processingpower on the server than on the...

The Hacker's Choice releases SSL DOS Tool

The Hacker's Choice releases SSL DOS Tool German hacker group "The Hacker's Choice" officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet. Establishing a secure SSL connection requires 15x more processingpower on the server than on the...

Vulnerabilities in CaptchaSecurityImages

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в веб приложении CaptchaSecurityImages. Это скрипт капчи, который используется на многих веб сайтах и движках. Insufficient Anti-automation уязвимость я нашёл 06.10.2007, во время...

ViArt Shopping Cart 3.5 Multiple Remote Vulnerabilities

No description provided by source. ============================================================== ViArt Shopping Cart v3.5 is multiple remote vulnerbalities maybe anathor version ============================================================== --==Author==-- : Florinu --==E-mail==-- :...

Viart shopping cart 3.5 - Multiple Vulnerabilities

Viart shopping cart 3.5 - Multiple Vulnerabilities =============================================================== !vuln ViArt Shopping Cart v3.5 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. ===============================================================...

Проблемы с LDAP в Windows 2000 (DoS, users discovery)

С помощью анонимного LDAP - запроса можно проверить существование пользователя. Многочисленные LDAP - запросы приводят к 100 загрузке сервера...

DoS против ColdFusion

Пользователь может вызвать предельную загрузку сервера путем обращения к определенным скриптам...

ms.smtp.DoS.txt

Date: Sun, 14 Mar 1999 20:49:30 -0600 From: Chris Adams To: [email protected] Subject: Microsoft's SMTP service broken/stupid Our mail servers came to a screeching halt today thanks to Microsoft. Our servers are still running sendmail 8.8 we've got custom stuff and are working on upgrading to...

process.tbl.attcks.txt

-------------------------------------------------------------- This story was printed from ZDNN, located at http://www.zdnet.com/zdnn. -------------------------------------------------------------- Major Unix flaw emerges By Randy Barrett, Inter@ctive Week Online March 1, 1999 9:30 AM PT URL:...