CVE-2014-3648

The CVE-2014-3648 issue concerns the simplepush server, where notifications are pushed for each registered installation using a deviceToken supplied by the user. The vulnerability arises because a bogus application can register with bad deviceTokens or point to arbitrary HTTP endpoints. This can ...

CVE-2014-3648

The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can't be reached...

PT-2022-7794

Name of the Vulnerable Software and Affected Versions simplepush server affected versions not specified Description The issue allows an attacker to generate endless exceptions or slow down the server by registering bogus applications with bad deviceTokens. This can turn the server into a DDOS...