Unspecified Vulnerability in Mattermost Server (CNVD-2020-35445)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.5.0, prior to 4.4.5, and prior to 4.3.4, which stems from a failure of the program to properly handle the...

Cross site request forgery (csrf)

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery CSRF issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests. This behavior could be abused by a remote unauthenticated attacker to trick Sitemag...

D-Link DIR-550A and DIR-604M Remote Code Execution Vulnerability

The D-Link DIR-550A and DIR-604M are both wireless router products from AUO D-Link. A remote code execution vulnerability exists in the D-Link DIR-550A and DIR-604M versions 2.10KR and earlier. An attacker can exploit the vulnerability by injecting and executing operating system commands with...

memcached: UDP server support allows spoofed traffic amplification DoS

It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service DDoS attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causi...

Multiple Denial of Service Vulnerabilities in Linksys Smart Wi-Fi Routers

Linksys Smart Wi-Fi Routers are smart Wi-Fi routers. Multiple denial of service vulnerabilities exist in Linksys Smart Wi-Fi Routers. Allows an unauthenticated attacker to create a denial-of-service DoS condition on the router that will cause the router to stop responding or reboot by sending...

QNAP Systems Signage Station Authentication Bypass Vulnerability

QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. An authentication bypass vulnerability exists in QNAP Systems Signage Station, which allows remote attackers to perform unauthorized actions by sending spoofed HTTP requests...

DHCP IP exhaustion attack: DHCPwn

DHCPwn is a tool used for testing DHCP IP exhaustion attacks. It can also be used to sniff local DHCP traffic. The DHCP protocol is connectionless and implemented via UDP. These two characteristics allow this attack to be performed. Since there is no actual connection being made between the clien...

CVE-2010-5077

server/svmain.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service network traffic amplification via a spoofed 1 getstatus or 2 rcon request...

NTP Mode 7 GET_RESTRICT DRDoS Scanner

This module identifies NTP servers which permit "reslist" queries and obtains the list of restrictions placed on various network interfaces, networks or hosts. The reslist feature allows remote attackers to cause a distributed, reflected denial of service aka, "DRDoS" or traffic amplification via...

Linksys Cisco WAG120N CSRF Vulnerability

No description provided by source. ---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High...

Debian: Security Advisory (DSA-2442-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2442-1 (openarena)

The remote host is missing an update to openarena announced via advisory DSA 2442-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DSA-2442-2 openarena - UDP traffic amplification

Bulletin has no description...

NTP Monitor List Scanner

This module identifies NTP servers which permit "monlist" queries and obtains the recent clients list. The monlist feature allows remote attackers to cause a denial of service traffic amplification via spoofed requests. The more clients there are in the list, the greater the amplification. This...