409 matches found
CVE-2016-1288
The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service service outage by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840...
Samba Unicode Filename Buffer Overflow (CVE-2004-0882)
A vulnerability has been reported in the way Samba handles file information requests. A malformed request can trick the server into overflowing an incorrectly allocated buffer while generating a response. If certain conditions are met, an attacker can exploit this vulnerability to execute malicio...
Seagate Dashboard 4.0.21.0 - Crash (PoC)
!/usr/bin/env python Exploit Title: Crash PoC Seagate Dashboard 4.0.21.0 Date: 2015-06-20 Exploit Author: HexTitan Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/seagate-dashboard-windows-master-dl/ Version: 4.0.21.0 Tested on: Windows 8.1...
Oracle Solaris Third-Party Patch Update : kerberos (cve_2002_2443_denial_of)
The remote Solaris system is missing necessary patches to address security updates : - schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 aka krb5 before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service CPU...
WebBBS Pro 1.18 - GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7890/info A vulnerability has been discovered in WebBBS Pro, which may allow a remote attacker to trigger a denial of service condition in the WebBBS HTTP server. It has been reported that a remote attacker may cause the...
AVM KEN! 1.3.10/1.4.30 Malformed Request Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file...
Mozilla Bonsai 1.3 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the requesti...
Netwin SurgeFTP 1.0 b Malformed Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2442/info SurgeFTP is a FTP Server distributed and maintained by Netwin. SurgeFTP is a configurable, easily maintained ftp server, functional on both the UNIX and Windows platforms. A problem with the SurgeFTP program cou...
SureCom EP-9510AX/EP-4504AX Network Device Malformed Web Authorization Request Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service...
Microsoft Windows Media Services 4.0/4.1 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. If a specially malformed request is sen...
Jakarta Tomcat 3.x/4.0 Error Message Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3199/info When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver...
CVE-2014-2287
channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...
Varnish Cache Denial Of Service
Summary ======= Varnish Cache with certain configurations is vulnerable to a denial of service attack. Three lines of VCL code solves the problem. This issue was discovered by Ilia Sharov, Yandex. This has been assigned CVE-2013-4484. Details ======= If Varnish receives a certain illegal request,...
EchoVNC Viewer - Remote Denial of Service
EchoVNC Viewer - Remote Denial of Service !/usr/bin/env python ================================================================ + Title: EchoVNC Viewer Remote DoS Vulnerability + Discovered: 29/07/2013 + Software Vendor: http://sourceforge.net/projects/echovnc/ + Author: Z3r0n3 - Independent...
EchoVNC Viewer - Remote Denial of Service
!/usr/bin/env python ================================================================ + Title: EchoVNC Viewer Remote DoS Vulnerability + Discovered: 29/07/2013 + Software Vendor: http://sourceforge.net/projects/echovnc/ + Author: Z3r0n3 - Independent Security Researcher + Contact: [email protected]...
CVE-2013-1184
CVE-2013-1184 affects Cisco UCS Manager (XML API management service) in UCS 1.x before 1.2(1b). The Management API can be triggered by a malformed request to cause a denial-of-service (service outage). Affected component: XML API management service in the Manager. Root cause: malformed request ha...
CVE-2013-1184: Improper Input Validation
The management API in the XML API management service in the Manager component in Cisco Unified Computing System UCS 1.x before 1.21b allows remote attackers to cause a denial of service service outage via a malformed request, aka Bug ID CSCtg48206...
Digium Asterisk SIP Channel Driver Denial Of Service - High Confidence (CVE-2011-4063)
A denial of service vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in Asterisk's SIP channel driver while handling malformed REGISTER requests. A remote attacker may exploit this vulnerability by sending a specially crafted REGISTER request to an affected...
