30 matches found
Microticket Mobile App Has Logic Design Flaws
Microticket Mobile App is an e-ticketing App developed by the R&D team of Beijing Microticket E-commerce Co. There is a logic design vulnerability in Microticket Mobile App. Attackers can utilize this vulnerability to replay the packets of sending CAPTCHA without restriction and bombard the clien...
Multiple Vulnerabilities in UZONE App
UZONE APP is a shopping application based on the UZONE product platform. An SMS bomb and logic design vulnerability exists in UZONE APP. The vulnerability is due to the number of SMS verification sends in the service side is not verified due to the attacker can be any cell phone number SMS attack...
CVE-2009-0747
The ext4isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the isizehigh structure member during operations on arbitrary types of files, which allows local users to cause a denial of service CPU consumption and error-message flood by...
CVE-2009-0747
The CVE-2009-0747 issue affects the Linux kernel’s ext4_isize helper in fs/ext4/ext4.h, exposing a denial-of-service risk when a local user mounts a crafted ext4 filesystem. The vulnerability arises from using the i_size_high structure member during operations on arbitrary file types, potentially...
Published some of Ring3 at the end of the process of skill-vulnerability warning-the black bar safety net
In response to the XHR call, in 2 0 0 8 年 5 月 5, re-finishing, and some new skills. 2 0 0 8 years 7 months 1 3 to increase a skill. All of OpenProcess/ZwOpenProcess/OpenThread/ZwOpenThread can replace the ZwQuerySystemInformation-ZwOpenProcess-ZwDuplicateObject it. Specific is why your own...
CVE-2008-2218
Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server MCS before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service crash via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of servic...
Nortel SIP多媒体PC客户端远程报文洪水拒绝服务漏洞
BUGTRAQ ID: 28994 Nortel SIP多媒体PC客户端是基于PC的应用程序，可提供强大的多媒体通讯功能。 Nortel SIP处理大量报文时存在漏洞，远程攻击者可能利用此漏洞导致程序崩溃不可用。 如果使用Nessus扫描工具向Nortel SIP多媒体PC客户端发送了大量报文的话，就可能触发缓冲区溢出，导致客户端出现错误消息并终止。 Nortel Networks 多媒体PC客户端SIP电话 4.0 Nortel Networks 多媒体PC客户端SIP电话 3.5 Nortel Networks ---------------...
HYSA-2006-006-g-book.txt
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...
[Full-disclosure] HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...