CVE-2018-15852

Technicolor TC7200.20 devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while...

PT-2018-13242 · Technicolor · Technicolor Tc7200

Name of the Vulnerable Software and Affected Versions: Technicolor TC7200.20 version 20 Description: The issue allows remote attackers to cause a denial of service, resulting in a networking outage, by flooding the device with random MAC addresses, as demonstrated by macof. It is noted that...

Design/Logic Flaw

SAP Gateway SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.53 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

Did my comment on your blog get lost?

If you ever feel bad about your job because of mindless tasks you must perform day after day, or if you're bothered by the fact that your chosen work pays crap, produces nothing useful, and helps no one: have a look at blog comment spammers and breathe a sigh of relief. They make almost any job...

DNS Servers Request Flooding Denial of Service

Remote attackers may rapidly send a large number of DNS requests to the server within a short period of time. Successful exploitation may cause the server to crash, resulting in a denial of service condition...

Liberapay: No Data Validation, No Captcha, No Filters...

POST /for/new HTTP/1.1 Host: liberapay.com User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:52.0 Gecko/20100101 Firefox/52.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: pt-BR,pt;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate Referer:...

CVE-2018-0332

A vulnerability in the Session Initiation Protocol SIP ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a lack of flow-control mechanisms in the software. An attacke...

Liberapay: REGISTRATION USING FAKE EMAIL ACCOUNT

Go to page https://liberapay.com/sign-up 2. Input email address I tried to register with some email address [email protected] [email protected] [email protected] [email protected] [email protected] 3. Select the currency you want to use 4. click "GO" button 5. Will automatically enter into account without going through the process of verification email...

CVE-2018-2422

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

Wireless GUI Android Security Assessment: Hijacker

Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng , MDK3 and Reaver . It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with an...

IMM2 Denial of Service Attack by an Unprivileged User - NL

Lenovo Security Advisory: LEN-14450 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3768 Summary Description: A vulnerability was discovered in the Integrated Management Module 2 IMM2 used in some Lenovo servers where an unprivileged...

MicroTalk App Has SMS Bombing Vulnerability

MicroTalk App is a calling software. MicroTalk APP has SMS bombing vulnerability. The attacker sends unlimited CAPTCHA to the cell phone by catching packets through the forget password function, consumes server resources, and carries out SMS bombing...

MikroTik RouterOS Multiple Vulnerabilities

MicroTik RouterOS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:mikrotik:routeros"; if...

CVE-2017-1000407

CVE-2017-1000407 affects the Linux kernel when built with KVM support, where an attacker can flood the diagnostic port 0x80 and trigger a kernel crash. Root cause: improper validation of user-supplied input at the diagnostic port, enabling denial of service via port flooding. Impact per public ad...

CVE-2017-1000407

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic...

Infogram: No Rate Limit on account deletion request(Leads to huge email flooding/email bombing)

Dear sir, At first,i want to say that this sensitive action definitely should be set with rate limit. Note:-This is about huge bombing/brute force on any endpoints. Vulnerability:- -No rate limit has been set for generating account deletion emails for accounts on above selected domain. -As there ...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30934)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

habu - Network Hacking Toolkit

Habu is to teach and learn some concepts about Python and Network Hacking. These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing. Most of them are related with networking, and the implementations are intended to be understandable for who wants to read the...

Microsoft Windows NetBIOS Denial of Service Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. NetBIOS is one of the network input\output system protocols. A denial of service vulnerability exists in NetBIOS in Microsoft Windows, which arises from the program's failure to properly handle NetBIO...

Default credentials

Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots...