cve-2023-44487

CVE-2023-44487 Reset Rápido HTTP/2 Há alguns exemplos neste repositório que não foram testados completamente para analisar o impacto, mas eu só queria demonstrar o conceito deste ataque iniciar muitos streams e enviar imediatamente um quadro RSTSTREAM para evitar atingir MAXCONCURRENTSTREAMS...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset In diesem Repository gibt es einige Beispiele, die nicht vollständig auf ihre Auswirkungen getestet wurden. Ich wollte lediglich das Konzept dieses Angriffs demonstrieren viele Streams starten und sofort nach dem Senden des RSTSTREAM-Frames die...

Mars: 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)

A vulnerability was present in the forgot password functionality of the platform. By sending carefully timed requests, an attacker was able to obtain the password reset token for any account using only the victim's email address...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...

TCP RST packets spoofing

By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...