8921 matches found
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...
SUSE-SU-2015:1790-1 Security update for icu
icu was updated to fix one security issue. This security issue was fixed: - CVE-2014-9654: Insufficient size limit checks in regular expression compiler bsc917129...
Limit Attempts < 1.1.1 - SQL Injection
The Limit Attempts by BestWebSoft WordPress plugin was affected by a SQL Injection security vulnerability...
Oracle: Security Advisory (ELSA-2013-0276)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Telegram Denial Of Service / Bypass Limit Vulnerabilities
Exploit for multiple platform in category dos / poc + Title: Telegram - Multiple Vulnerabilities + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://web.telegram.org / https://my.telegram.org Author : Eduardo Alves E-Mail : edudx1 at gmail dot com Website :...
Apple OS X SSH Link Denial of Service Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X launchd fails to properly limit the number of processes, allowing attackers to exploit a vulnerability to submit multiple SSH links for denial of service attacks...
Telegram Denial Of Service / Bypass Limit
Title: Telegram - Multiple Vulnerabilities + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://web.telegram.org / https://my.telegram.org Author : Eduardo Alves E-Mail : edudx1 at gmail dot com Website : tempest.com.br/en/ Info: As we know, the Telegram access uses by...
Google Play Store increases Android APK Size Limit from 50MB to 100MB
Google is doubling the maximum APK file size on the Play Store from 50 MB to 100 MB. That means... Android app developers can now build higher quality Apps and Games that users love. Of course, for an end user it may affect the overall app performance and installation time, as well as mobile data...
CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
DEBIAN-CVE-2015-6806
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...
CVE-2015-5869
The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
CVE-2015-5869
The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
WordPress WP Limit Login Attempts Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation of a set of PHP language development of blogging platform, the platform supports PHP and MySQL server set up a personal blog site.WP Limit Login Attempts is one of the login protection mechanism allowing bloggers to limit the number of times you can...
CVE-2015-6829
Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header...
Sql injection
Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header...
CVE-2015-6829
WP Limit Login Attempts plugin for WordPress (getip function) contains SQL injection vulnerabilities exploitable via the X-Forwarded-For and Client-IP HTTP headers. Affected versions are before 2.0.1. Consequences include arbitrary SQL execution on the database. Mitigation per connected sources i...
CVE-2015-6829
Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header...
BitHunt: No rate limit or captcha to identify humans
HI, There is no captcha or rate limit to protect from bots against adding request for new products. Check image attached for 20 request sent one after the other with 200 OK status...
SOL17199 - Linux kernel vulnerability CVE-2014-3690
Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...
The vulnerability of the iOS operating system allows a perpetrator to gain access to arbitrary objects in the file system.
The vulnerability of the Air Traffic component in the iOS operating system exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to arbitrary objects in the file system...