2743 matches found
http-mcmp NSE Script
Checks if the webserver allows modcluster management protocol MCMP methods. The script sends a MCMP PING message to determine protocol support, then issues the DUMP command to dump the current configuration seen by modclustermanager. References: Script Arguments slaxml.debug See the documentation...
ETX-R vulnerable to denial-of-service (DoS)
Overview ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
CVE-2016-0878
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service cold start by sending two crafted ping requests...
CVE-2016-0877
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...
CVE-2016-0877
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...
Memory corruption
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...
CVE-2016-0877
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...
CVE-2016-0877
CVE-2016-0877 affects Moxa EDR-G903 Secure Router devices (pre-3.4.12). The vulnerability is a memory leak in the information exposure path caused by the ping function, allowing remote attackers to cause denial of service via memory consumption. The issue is tied to a vulnerability in the device’...
New Relic: Blind SSRF on synthetics.newrelic.com
Introduction It was possible to retrieve some data from the http://169.254.169.254/latest/ URL corresponding to the amazon instance metadatas. With more time, we can dump the whole content. PoC When creating a Ping Monitor on the https://synthetics.newrelic.com/accounts/XXXXXXX/synthetics URL, it...
Linux kernel ping 套接字释放后重利用漏洞
No description provided by source...
CANToolz aka YACHT (Yet Another Car Hacking Tool) - Framework for Black-Box CAN Network Analysis
CANToolz is a framework for analysing CAN networks and devices. This tool based on different modules which can be assembled in pipe together and can be used by security researchers and automotive/OEM security testers for black-box analysis and etc. You can use this software for ECU discovery, MIT...
Juniper Networks Junos OS QFX Series: PFE DoS Vulnerability (JSA10747)
Junos OS on QFX series is prone to a denial of service DoS vulnerability in PFE. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Arbitrary Command Execution Vulnerability in the ping_ip_address Parameter of the Bump Network Firewall System
AuTech firewall system has the ability to prevent various attacks inside and outside the network, suppress network storms through fine-grained traffic management, as well as rich application layer filtering functions and multi-link load balancing and server load balancing. An arbitrary command...
Black-Box CAN Network Analysis Framework: CANToolz
CANToolz is a framework forCANbus network and device analysis. This tool consist of various different modules which can be piped together and used by security researchers and automotive/OEM security testers for black-box analysis of any CANbus system. You can use this software for ECU discovery,...
Ping Pong Masters - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ping Pong Masters published at the 'play' market has multiple vulnerabilities...
node.js的ws模块存在远程内存泄露漏洞
近日，在允许用户通过简单地发送ping数据帧，来分配内存的ws模块中发现存在着漏洞。该漏洞会拒绝用户发送数据的请求，使用户发送ping数据帧功能失效，在此之前，还会加大数据帧的负载。 实际上，这就是漏洞的具体表现。但在模块中，ws通常将我们所要传入内存的所有数据进行相应的转换，这就是漏洞之所在。我们对所要发送数据的类型都没做任何检查。当你在node.js中需要存储一个数字时，该漏洞就会自动给数字分配一个存储大量字节的字符串空间，从而加大内存的负载。 var x = new Buffer100; // vs var x = new Buffer'100';...
The vulnerability of the PMG5318 router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the PMG5318 router microprogramming system’s accessibility detection mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary commands via the PingIPAddr parameter...
node. js remote memory disclosure vulnerability-vulnerability warning-the black bar safety net
Recently, in allows users to simply send a ping data frame to the allocated memory of the ws module found in the presence of the vulnerability. The vulnerability will reject a user request to send data, allowing users to send a ping data frame function failure, prior to that, it will also increas...
Design/Logic Flaw
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00AANC.2C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter...
WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
WIMAX LX350PWIXFMR-108 - Multiple Vulnerabilities Exploit Title: WIMAX LX350PWIXFMR-108 - Multiple Vulnerabilities Date: ˝Friday, ˝December ˝11, ˝2015 Exploit/Vulnerability Author: Alireza Azimzadeh Milani alimp5 Vendor Homepage: http://www.greenpacket.com Version: v2.10.14-g1.5.2 Tested on:...