OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory...

Cisco IOS XE Software Border Gateway Protocol Message Processing Denial of Service Vulnerability

A vulnerability in Border Gateway Protocol BGP message processing functions of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted BGP attributes. An attacker could exploit this...

Algolia: No Rate Limit In Inviting Similar Contact Multiple Times

There is not Rate limit in Inviting a similar contact Multiple times See the attachment for confirmation :...

CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

UBUNTU-CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

openSUSE Security Update : glibc (openSUSE-2016-852)

This update for glibc provides the following fixes : - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

NSD Denial of Service Vulnerability

NSD is a high-performance open source name server. NSD suffers from a denial of service vulnerability. Because the NSD server fails to limit the size of the data transferred in the region, allowing a remote attacker can exploit the vulnerability to submit a special request for a denial-of-service...

The vulnerability of the microprogramming software of the D–Link DSR–500 router allows a malicious individual to obtain the user password.

To store passwords, the DES encryption algorithm with a salt is used. This results in a password length limitation of 8 characters the remaining characters are discarded...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Adobe Pepper Flash for Google Chrome due to an incorrect limitation on the SWF file format. Exploiting this vulnerability allows malicious actors to carry out attacks on endpoints using JSONP requests via cross-site request fraud CSRF. These actors can gain access to...

Fierce - A DNS Reconnaissance Tool for Locating Non-Contiguous IP Space

First, credit where credit is due, fierce was originally written by RSnake along with others at http://ha.ckers.org/ . This is simply a conversion to Python 3 to simplify and modernize the codebase. The original description was very apt, so I'll include it here: Fierce is a semi-lightweight scann...

SUSE-SU-2016:1733-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

SUSE-SU-2016:1721-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

FantasyTote: Betting more than max amount

Hey Fantasytote, This is not really a security issue since this won't leak any data of other users or something like that but i still wanted to tell you this because there must be a reason you guys limit the max bet to 150 euro per bet. You can reproduce this issue by betting 150 euro, intercepti...

FantasyTote: Urgent Fix Balance Limit bypass

Hi check this Video POC i am able to bypass the Limit of deposite balnce the limit is 150 but i can put 2000 https://drive.google.com/file/d/0B-HtZBO84sdSMkFEQ21vZW5Uak0/view Thanks Regards Tayyab Qadir...

DoS due to excessively large websocket message

Overview Affected versions of ws do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload. Recommendation Update to version 1.1.1 or later. Alternatively, set the maxpayload...

UBUNTU-CVE-2016-5688

The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...

Corega CG-WLR300GNV and CG-WLR300GNV-W Privilege Gain Vulnerabilities

The Corega CG-WLR300GNV and CG-WLR300GNV-W are both wireless LAN routers from Corega Japan. A privilege acquisition vulnerability exists in the Corega CG-WLR300GNV and CG-WLR300GNV-W that stems from the program failing to limit the number of authentication requests. An attacker within wireless...

Nextcloud: No Rate Limiting on stats.nextcloud.com login

There is no defenses or any lockout mechanism on stats.nextcloud.com login , a malicious minded user can continue guessing an account password limitless, and this might cause to completely compromised the site. Recommendation: Put a rate limit or a any lockout mechanism Regards Japz...

PKAV found Struts2 latest remote command execution vulnerability S2-0 3 7-the vulnerability warning-the black bar safety net

0x00 Preface Just after children's Day back found that struts2 shows the S033, so put down the hands of the Lollipop quickly analyze. ! 0x01 S2-0 3 3 vulnerability review First recall S033 According to the official description ! Obviously there are two key points: the first is the REST Plugin,the...