CVE-2016-1275

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...

LizardStresser IoT Botnets Part of 400Gbps DDoS Attacks

LizardStresser, a distributed denial of service botnet, has found new life leveraging hundreds of internet-based webcams in attacks against Brazilian-based banks, government agencies as well as a handful of U.S.-based gaming companies. Researchers at the Arbor’s Security Engineering and Response...

Uber: Pixel flood attack in https://riders.uber.com/profile

Hi, It is the exact issue described here: https://hackerone.com/reports/390 Where uploading lottapixel.jpg it causes your service to time out HTTP/1.1 504 Gateway Time-out Server: nginx Date: Wed, 30 Mar 2016 02:29:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13928 Connection:...

USN-2682-1 linux-lts-utopic vulnerabilities

A flaw was discovered in the kvm kernel virtual machine subsystem's kvmapichasevents function. A unprivileged local user could exploit this flaw to cause a denial of service system crash. CVE-2015-4692 A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker...

162,000 WordPress Sites Used in DDoS Attack

More than 162,000 “popular and clean” WordPress sites were recently used in a large-scale distributed denial of service attack DDoS that exploited the content management system’s pingback feature. While the WordPress team is aware of the issue it’s not expected to be patched as it’s a default...

HackerOne: Pixel flood attack

Hey guys, I just found a way to make your service timeout. I didn't know if I should put this under the Internet section of just the HackerOne section, because the exploit also crashes my Windows Image Viewer. A lot of other services should be vulnerable as well. For the sake of responsible...

Sony Bravia TV sets DoS

Flood attack with malcrafted packets causes device to hang...

THC-ipv6 Toolkit – Attacking the IPV6 Protocol

THC-ipv6 Toolkit – Attacking the IPV6 Protocol A complete tool set to attack the inherent protocol weaknesses of IPV6 and ICMP6, and includes an easy to use packet factory library. Please note to get full access to all the available tools you need to develop IPV6 tools yourself or submit patches,...

Sun Solaris TCP SYN Flood远程拒绝服务漏洞

BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...

CVE-2005-4220

Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nma...

CVE-2005-4220

Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nma...

CVE-2005-4220

Netgear RP114 (and possibly other versions/devices) is affected by CVE-2005-4220: a remote attacker can trigger a SYN flood between an internal-system and an external-system interface, causing a temporary routing failure. Exploitation is demonstrated with nmap; no remediation/fix details are prov...

PhpTagCool 1.0.3 - SQL Injection

!/usr/bin/perl PhpTagCool Zatueritor 1.0 Copyright: Megabyte www.mbytesecurity.org Greetz: Rootbox for discovering the forwarded-for issue Te amo Pandora Crashcool,fuiste defaceado por un bug de tu propia programacion,ahora que inventaras? use IO::Socket; $x = 0; print q PhpTagCool Zatueritor 1.0...

PhpTagCool 1.0.3 - SQL Injection

PhpTagCool 1.0.3 - SQL Injection !/usr/bin/perl PhpTagCool Zatueritor 1.0 Copyright: Megabyte www.mbytesecurity.org Greetz: Rootbox for discovering the forwarded-for issue Te amo Pandora Crashcool,fuiste defaceado por un bug de tu propia programacion,ahora que inventaras? use IO::Socket; $x = 0;...

easyfile12.txt

Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (3)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 3 source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

ZoneAlarm 3.7.202/PRO 4.0/PRO 4.5 - Random UDP Flood Denial of Service (2)

// source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the vulnerable software. /...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (2)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 2 // source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

CVE-2003-0293

PalmOS allows remote attackers to cause a denial of service CPU consumption via a flood of ICMP echo request ping packets...

PalmOS ICMP flood DoS.

-BACKGROUND-: PalmOS is vulnerable to an ICMP DoS attack, when an attacker continuously sends ICMPECHO packets to the device. This attack causes 100 CPU usage, and the device therefore comes to a total lockup. The Pilot is almost instantly rendered unusable, until the attacker stops sending...