6096 matches found
PowerDNS Authoritative Server DoS Vulnerabilities (2016-01)
PowerDNS Authoritative Server is prone to two denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Packet Capture Generator for IDS: Sniffles
Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or rules and...
CVE-2016-5230
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module functions via a crafted app...
WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack
WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5 Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin chmod +x installer.sh ./installer.sh --install refer t...
Cisco NX-OS Malformed ARP Header Denial of Service Vulnerability
A vulnerability in Address Resolution Protocol ARP feature of the Cisco Nexus Operating System NX-OS could allow an unauthenticated, adjacent attacker to cause a partial denial of service DoS condition because the ARP process unexpectedly restarts. Copyright C 2016 Greenbone Networks GmbH Some te...
CVE-2016-2515
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service CPU consumption or partial outage via a long 1 header or 2 URI that is matched against an improper regular expression...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
OSIsoft PI SQL Data Access Server Input Validation Vulnerability
OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI SQL Data Access Server. OSIsoft has produced a new version of PI SQL Data Access Server OLE DB 2016 1.5 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Affected versions of PI...
Mail.ru: By pass admin panel [seminars.mail.ru]
An partial information from seminars.mail.ru could be obtained due to invalid access restrictions seminars.mail.ru is not in Bug Bounty scope, but some reward was issued due to problem significance...
WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities
WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin...
Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to cause partial service interruptions
The vulnerability of the JAXP sub-component in JRockit and Java Platform-related software platforms is associated with errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets via the Java Web Start...
The vulnerability of the MySQL database management system allows a hacker to cause partial service interruptions.
The vulnerability of the InnoDB sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions through network packets...
The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption
The vulnerability of Solaris Kernel Zones, a component of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to cause partial service disruption...
The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption
The vulnerability of the Boot subcomponent of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow a local attacker to cause a partial service failure...
The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.
The vulnerability of the XML Developer’s Kit component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker to cause a partial service failure through HTTP requests via Java Web Start applications or Java applets...
The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption
The vulnerability of the Solaris operating system’s RPC subsystem is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions by invoking remote procedures...
The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.
The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...
The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.
The vulnerability of the XDB component—the XML Database component of the Oracle Database management system—is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets...
Oracle Solaris Critical Patch Update : jan2016_SRU11_3_3_6_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Libc Library. The supported version that is affected is 11. Difficult to exploit vulnerability requiring logon to...
Authentication Weakness
Overview Versions of keystone prior to 0.3.16 are affected by a partial authentication bypass vulnerability. In the default sign in functionality, if an attacker provides a full and correct password, yet only provides part of the associated email address, authentication will be granted...