757 matches found
OSPF Protocol MaxAge LSA Denial of Service Vulnerability in Multiple Huawei Products
AC6005 is a wireless access controller AC AccessController from Huawei Technologies Co. the AR1200 and AR3200 are router products. the AR207 is the base model in Huawei's AR200 series of enterprise routers. A denial of service vulnerability exists in the MaxAge LSA in the OSPF protocol of multipl...
Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
RUSTSEC-2017-0005 Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
rabbitmq-server: DoS via lengths_age or lengths_incr parameter in the management plugin
A resource-consumption flaw was found in RabbitMQ Server, where the lengthsage or lengthsincr parameters were not validated in the management plugin. Remote, authenticated users with certain privileges could exploit this flaw to cause a denial of service by passing values which were too large...
PHP Matrimonial Script 3.0 - SQL Injection
Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo: http://74.124.215.220/matriialscrip/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64...
rabbitmq-server: DoS via lengths_age or lengths_incr parameter in the management plugin
A resource-consumption flaw was found in RabbitMQ Server, where the lengthsage or lengthsincr parameters were not validated in the management plugin. Remote, authenticated users with certain privileges could exploit this flaw to cause a denial of service by passing values which were too large...
age-slide.com XSS vulnerability
Open Bug Bounty ID: OBB-209179 Description| Value ---|--- Affected Website:| age-slide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ice Age: Arctic Blast - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ice Age: Arctic Blast published at the 'play' market has multiple vulnerabilities...
DEBIAN-CVE-2015-8786
The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service resource consumption via the 1 lengthsage or 2 lengthsincr parameter...
Service worker meeting notes
On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...
Clinic Management System - Blind SQL Injection
Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All Versions Tested on : Apache | PHP 5.5.36 | MySQL...
FantasyTote: Weak HSTS age
Send this request: https://www.fantasytote.com/login GET /login HTTP/1.1 Host: www.fantasytote.com User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:47.0 Gecko/20100101 Firefox/47.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5...
Caching best practices & max-age gotchas
Getting caching right yields huge performance benefits, saves bandwidth, and reduces server costs, but many sites half-arse their caching, creating race conditions resulting in interdependent resources getting out of sync. The vast majority of best-practice caching falls into one of two patterns:...
Game of War - Fire Age - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Game of War - Fire Age published at the 'play' market has multiple vulnerabilities...
Archaeologist - Ice Age - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Archaeologist - Ice Age published at the 'play' market has multiple vulnerabilities...
Age of Conquest LITE - Customized SSL, External URLs, Runtime command execution vulnerabilities
HackApp vulnerability scanner discovered that application Age of Conquest LITE published at the 'play' market has multiple vulnerabilities...
Naval Age - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Naval Age published at the 'play' market has multiple vulnerabilities...
Mammoth World -Ice Age animals - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Mammoth World -Ice Age animals published at the 'play' market has multiple vulnerabilities...
Age of Avatars-艾瓦達榮耀 - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Age of Avatars-艾瓦達榮耀 published at the 'play' market has multiple vulnerabilities...
Brain Age Test Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Brain Age Test Free published at the 'play' market has multiple vulnerabilities...