106 matches found
The vulnerability of the Logitech Options peripheral control utility allows a hacker to execute arbitrary commands.
The vulnerability of the Logitech Options peripheral control utility lies in the lack of restrictions on the number of authentication attempts made through the WebSocket server. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted web page...
GHSA-3PWH-5MMC-MWRX Denial of Service in nes
Affected versions of nes are vulnerable to denial of service when given an invalid cookie header, and websocket authentication is set to cookie. Submitting an invalid cookie on the websocket upgrade request will cause the node process to throw and exit. Recommendation Update to version 6.4.1 or...
Denial of Service in nes
Affected versions of nes are vulnerable to denial of service when given an invalid cookie header, and websocket authentication is set to cookie. Submitting an invalid cookie on the websocket upgrade request will cause the node process to throw and exit. Recommendation Update to version 6.4.1 or...
CVE-2017-16025
Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only present when websocket authentication is set to cookie. Submitting an invalid cookie on the websocket...
Denial Of Service (DoS)
nes is vulnerable to denial of service DoS attacks. The node process will error and exit when an invalid cookie header is sent with a websocket upgrade request. This only happens when websocket authentication is set to cookie...
Multiple Vulnerabilities in Apple OS X Keychain/WebSocket/Sandbox ACLs
Apple Mac OS X is an operating system for Apple devices. Multiple vulnerabilities exist in the Apple OS X Keychain/WebSocket/Sandbox ACL. 1 A remote user can create an application that, when installed by the target user, can access the target application's keychain entries, delete the keychain...