Mozilla Bonsai 1.3 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the requesti...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

Varnish Cache Denial Of Service

Summary ======= Varnish Cache with certain configurations is vulnerable to a denial of service attack. Three lines of VCL code solves the problem. This issue was discovered by Ilia Sharov, Yandex. This has been assigned CVE-2013-4484. Details ======= If Varnish receives a certain illegal request,...

EchoVNC Viewer - Remote Denial of Service

EchoVNC Viewer - Remote Denial of Service !/usr/bin/env python ================================================================ + Title: EchoVNC Viewer Remote DoS Vulnerability + Discovered: 29/07/2013 + Software Vendor: http://sourceforge.net/projects/echovnc/ + Author: Z3r0n3 - Independent...

EchoVNC Viewer - Remote Denial of Service

!/usr/bin/env python ================================================================ + Title: EchoVNC Viewer Remote DoS Vulnerability + Discovered: 29/07/2013 + Software Vendor: http://sourceforge.net/projects/echovnc/ + Author: Z3r0n3 - Independent Security Researcher + Contact: [email protected]...

CVE-2013-1184

CVE-2013-1184 affects Cisco UCS Manager (XML API management service) in UCS 1.x before 1.2(1b). The Management API can be triggered by a malformed request to cause a denial-of-service (service outage). Affected component: XML API management service in the Manager. Root cause: malformed request ha...

Digium Asterisk SIP Channel Driver Denial Of Service - High Confidence (CVE-2011-4063)

A denial of service vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in Asterisk's SIP channel driver while handling malformed REGISTER requests. A remote attacker may exploit this vulnerability by sending a specially crafted REGISTER request to an affected...

CVE-2013-0120

The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service device crash via a malformed request...

CVE-2013-0120

The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service device crash via a malformed request...

UBUNTU-CVE-2012-6084

modules/mcapab.c in 1 ircd-ratbox before 3.0.8 and 2 Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request...

CVE-2012-6084

Removed by vendor...

Cross site request forgery (csrf)

The processasreq function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service uninitialized pointer dereference and daemon crash or possibly execute arbitrary...

python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...

LAN Messenger <= v1.2.28 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: LAN Messenger = v1.2.28 Remote Denial of Service Vulnerability Version: = v1.2.28 Date: 2012-04-28 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://lanmsngr.sourceforge.net/ Tested on: Windows ...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-3348

The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...

Memory corruption

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and daemon crash via a malformed...

CVE-2011-0391

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

Design/Logic Flaw

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...