PT-2017-17070

Name of the Vulnerable Software and Affected Versions MikroTik Router hAP Lite version 6.25 Description The issue allows remote attackers to cause a denial of service by sending many unsolicited TCP ACK packets, resulting in high CPU consumption. After the attack stops, the CPU usage remains at...

CVE-2017-6444: Uncontrolled Resource Consumption

The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service CPU consumption by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 10...

Joomloc-lite by joomloc.fr,1.3.3,SQL Injection

Joomloc-lite by joomloc.fr, 1.3.3, SQL Injection Resolution: update to 1.4.1 Update Notice URL http://www.joomloc.fr.nf/telecharger/file/joomloc-lite-free-3.html...

Mikrotik Hap Lite 6.25 Denial Of Service

CVE:2017-6444 Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Affected Series: Hap Lite Version: 6.25 Tested on: Parrot Security OS Date: 02-3-2017 Category: Network Appliance Vulnerable Part:...

MikroTik Router - ARP Table OverFlow Denial Of Service

/ Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Affected Series: Hap Lite Version: 6.25 Tested on: Parrot Security OS Date: 04-3-2017 Category: Network Appliance Vulnerable Part: TCP Stack...

MikroTik Router Denial Of Service | ARP Table OverFlow Exploit

Exploit for hardware platform in category dos / poc CVE:2017-6444 Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Series : Hap Lite Tested on: Parrot Security OS Date: 03-3-2017 Category: Netwo...

Design/Logic Flaw

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

DEBIAN-CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Affected software: pcsc-lite (PC/SC middleware). Vulnerability: a use-after-free of the internal cardsList after the handle is released via SCardReleaseContext, potentially enabling a crash or denial of service. Impact: denial of service (crash); additional disclosures on privilege escalation wer...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109: Use After Free

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

Joomla Joomloc-Lite component 'site_id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'siteid' parameter of the Joomla Joomloc-Lite component, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the parameter...

Messaging Lite G - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Lite G published at the 'play' market has multiple vulnerabilities...

Joomla Joomloc-Lite 1.3.2 SQL Injection

Exploit Title: Joomla! Component Joomloc-Lite v1.3.2 - SQL Injection Google Dork: inurl:index.php?option=comjoomloc Date: 18.02.2017 Vendor Homepage: http://www.joomloc.fr.nf/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/joomloc-lite/...

Joomla Joomloc-Lite 1.3.2 Component - site_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Joomloc-Lite v1.3.2 - SQL Injection Google Dork: inurl:index.php?option=comjoomloc Date: 18.02.2017 Vendor Homepage: http://www.joomloc.fr.nf/ Software Buy:...

Joomla! Component Joomloc-Lite 1.3.2 - site_id SQL Injection

Joomla! Component Joomloc-Lite 1.3.2 - siteid SQL Injection Exploit Title: Joomla! Component Joomloc-Lite v1.3.2 - SQL Injection Google Dork: inurl:index.php?option=comjoomloc Date: 18.02.2017 Vendor Homepage: http://www.joomloc.fr.nf/ Software Buy:...