tcconfig - A Simple Tc Command Wrapper Tool

A Simple tc command wrapper tool. Easy to set up traffic control of network bandwidth/latency/packet-loss to a network interface. Traffic control features Trafic shaping target Apply traffic shaping rules to specific target: Outgoing/Incoming packets Certain IP address/network or port Available...

Open Source LoRa CSS PHY Implementation: gr-lora

Open Source LoRa CSS PHY Implementation LoRa is a wireless LPWAN PHY that is developed and maintained by Semtech. It is designed to provide long range, low data rate connectivity to IoT-focused devices. A reasonable analogy is that LoRa is like cellular data service, but optimized for embedded...

U.S. Dept Of Defense: Sensitive Email disclosure Due to Insecure Reactivate Account field

Summary: An attacker could discover the emails of accounts on ██████ through the reset field. Description: https://████/███/accounts/requestreactivation/ This password reset field has no rate limiting, it additionally allows an attacker to guess at user accounts such as admin and it will then...

Cuvva: Missing rate-limits at endpoints

This is similar to 230674, but it turns out we missed out a key endpoint while fixing that one - the legacy POST /1/verificationtokensend used by older apps on our system. This has now been resolved : Thanks to @introvertmac for flagging this!...

Cuvva: Missing Rate limiting on https://underwriter.partner.cuvva.com/login

Duplicate of 231380...

Cuvva: Missing rate limit on https://underwriter.partner.cuvva.com/login

Rate limiting was missing on the verification token-sending part of our login process. This is more directly raised by 230674, but a subsequent knock-on effect of this is that it would be theoretically possible though extraordinarily difficult to brute-force the verification process. There is a...

Cuvva: No rate limiting at POST /2/2017-05-22/send_identifier_token

SUMMARY ---------- Hello, while testing your api I have noticed that the request at POST /2/2017-05-22/sendidentifiertoken does not have any rate limiting made about 60-70 requests and this actually sens an SMS when the type is mobilephone. I agree, this is not a very big issue, but all endpoints...

CVE-2017-6653

A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine ISE 2.10.474 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device where the ISE GUI may fail to respond to new or established connection...

Design/Logic Flaw

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.00.234 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit...

CVE-2017-6641

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

CVE-2017-6633

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.00.234 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit...

Trello: api flaw

Hope you guys are doing great. While going through your api documentation on https://developers.trello.com/advanced-reference/cardpost-1-cards-card-id-or-shortlink-actions-comments , an api endpoint POST /1/cards/card id or shortlink/attachments supposed to be rate-limited after 100 attachment bu...

Weblate: No Rate Limiting at /contact

Hi Weblate Security Team, How are you? Hope you all have a good day and doing well just like me. : I've found a No Rate Limiting in contact directory of your site because there is no mitigation in there like adding a captcha, In this case the attacker can spam you...

Cisco Remote Expert Manager Denial of Service Vulnerability

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

Cisco UCS C-Series Rack Servers TCP Port Denial of Service Vulnerability

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this...

CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

Default credentials

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

CVE-2017-8827

CVE-2017-8827 affects GeniXCMS 1.0.2: the forgotpassword.php endpoint lacks rate limiting, enabling a remote attacker to cause login denial of service or potentially perform arbitrary user password reset attacks via repeated requests. The available connected documents corroborate the same descrip...

Brute Force Attacks

github.com/spectolabs/hoverfly is susceptible to brute force attacks. The attacks are possible because it does not provide a rate limit for logging in. A malicious user can have an unlimited amount of attempts to bruteforce the username and password...