ntpd Broadcast Mode Denial of Service Vulnerability

Network Time Protocol NTP is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. Synchronizing a computer's clock to UTC ensures that data interactions in a network can proceed smoothly.NTPD Network Time Protocol daemon is an operating...

Linux kernel denial of service vulnerability (CNVD-2016-11069)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel has a denial of service vulnerability that can be exploited by attackers to cause a denial of service and deny service to legitimate users...

Linux kernel denial of service vulnerability (CNVD-2016-11070)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel has a denial of service vulnerability that can be exploited by attackers to cause a denial of service and deny service to legitimate users...

Microsoft Exchange Open Redirect Vulnerability

An open redirect vulnerability exists in Microsoft Exchange that could lead to spoofing. To exploit the vulnerability, an attacker could send a link that has a specially crafted URL, and convince the user to click the link. When an authenticated Exchange user clicks the link, the authenticated...

SAP Adaptive Server Enterprise Denial of Service Vulnerability

SAP Adaptive Server Enterprise Sybase ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. A denial of service vulnerability exists in SAP Adaptive Server Enterprise, which could b...

Dynamic Network Analysis Tool: FakeNet-NG

Dynamic Network Analysis Tool FakeNet-NG is a next generation dynamic network analysis tool for malware analysts and penetration testers. It is open source and designed for the latest versions of Windows. FakeNet-NG is based on the excellent Fakenet tool developed by Andrew Honig and Michael...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter. An attacker could exploit this vulnerability to cause the application to deny service to legitimate users...

Huawei eSpace 8950 IP Phone Denial of Service Vulnerability

Huawei eSpace 8950 is an intelligent video phone product from Huawei, China. A denial of service vulnerability exists in Huawei eSpace 8950. An attacker can exploit this vulnerability to cause the program to deny service to legitimate users...

Attackers Embracing Steganography to Hide Communication

Encouraged by patterns carried out on a larger scale recently, researchers believe digital steganography has arrived as a legitimate method for attackers to use when it comes to obscuring communication between command and control servers. In a presentation last week at Black Hat Europe researcher...

Pulse Connect Secure Legitimate Conference ID Number Disclosure Vulnerability

Pulse Connect Secure is an SSL-based VPN for businesses. Pulse Connect Secure has a security vulnerability that allows remote users to submit special requests to determine the ID number of a legitimate process session...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...

ZNC < 1.4 DoS Vulnerability

ZNC is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:znc:znc";...

Libuser Local Denial of Service Vulnerability

libuser is a library of standard interfaces for manipulating and managing user and group accounts. A local denial of service vulnerability exists in libuser. A local attacker could exploit this vulnerability to crash the application and deny service to legitimate users...

Google Calls Proposed U.S. Wassenaar Rules 'Not Feasible'

As the clock winds down on the comment period for the United States government’s proposed implementation of the Wassenaar Arrangement export controls for intrusion software, Google officials say that the rules would have a “significant negative impact” on security research. The Department of...

eBay Fixes Reflected File Download Flaw

For many years, eBay has been one of the bigger targets for phishers and many other kinds of attackers and they have been honing their tactics and improving them along the way. Much of their effectiveness depends on convincing users that they’re on the real eBay site and the site recently fixed a...

IC3 Issues Alert for Fake Government Websites

The Internet Crime Complaint Center IC3 has released an alert that warns consumers of fraudulent government-services websites that mimic legitimate ones. Scam operators lure consumers to these fraudulent websites in order to steal their personal identifiable information PII and collect fees for...

OpenX Multiple Open Redirect Vulnerabilities

OpenX is prone to multiple open redirect vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openx:openx";...

KarjaSoft Sami HTTP Server 1.0.4/1.0.5/2.0.1 Request Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22159/info Sami HTTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the server application, denying further service to legitimate users. import socket...

Progress WebSpeed 3.0/3.1 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23778/info WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the application to become unresponsive, denying...