Novel NTP Attacks Roll Back Time

Sharon Goldberg remembers the cold February day when her Boston University PhD candidate Aanchal Malhotra was studying routing security, in particular, attacks against the resource public key infrastructure RPKI—and kept hitting a dead end because of a cache-flushing issue. The resourceful Malhot...

CVE-2015-7705

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests...

UBUNTU-CVE-2015-7705

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests...

Imgur: Information disclosure (No rate limting in forgot password & other login)

Hi there, I noticed a small information leak which allows an attacker to check whether an email address is associated with an account.If your account is not associated with website then an error will become raise that "That username or email was not found." You should always return a status messa...

BitHunt: No rate limit or captcha to identify humans

HI, There is no captcha or rate limit to protect from bots against adding request for new products. Check image attached for 20 request sent one after the other with 200 OK status...

Xen xenmem_add_to_physmap_one() printk rate limit denial of service vulnerability

Xen is an open source virtual machine. There is a problem with the printk rate limit in Xen xenmemaddtophysmapone, which allows Guest domains with partial administrative control and the ability to map other Guest domains to send large numbers of messages to the Xen console...

printk is not rate-limited in xenmem_add_to_physmap_one

ISSUE DESCRIPTION XENMAPSPACEgmfnforeign dumps the p2m, on ARM, when it fails to get a reference on the foreign page. However, dumpp2mlookup does not use rate-limited printk. A malicious infrastructure domain, which is allowed to map memory of a foreign guest, would be able to flood the Xen...

Keybase: No rate limiting for sensitive actions (like "forgot password") enables user enumeration

Hi there, I noticed a small information leak which allows an attacker to check whether an email address is associated with an account. Steps to reproduce: Send a POST-Request to the url POST //api/1.0/send-reset-pw.json HTTP/1.1 as the following example shows: POST //api/1.0/send-reset-pw.json...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2015-04698)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A security vulnerability exists in Cisco Unified Communications Manager that allows authenticated users to submit AVVID XML LAYER session requests at a special high rate, making the target...

Enter: No rate limit which leads to "Users information Disclosure" including verfification documents etc.

HOST api.romit.io Endpoint /v0/cash/auth/login Issue When an attacker tries to login at app.romit.io, he is prompted to enter the PIN . There is no rate limit to verify this. Although there is a an authorization header Authorization: Credential=b67b0b10571ac00444de3cffde0b5b05,...

FreeBSD : xen-kernel -- arm: vgic: incorrect rate limiting of guest triggered logging (912cb7f7-27df-11e5-a4a5-002590263bf5)

The Xen Project reports : On ARM systems the code which deals with virtualizing the GIC distributor would, under various circumstances, log messages on a guest accessible code path without appropriate rate limiting. A malicious guest could cause repeated logging to the hypervisor console, leading...

Legal Robot: - Guessing registered users in legalrobot.com

Security researcher described a method to enumerate emails from the password reset page using brute force techniques. The response messages allowed a user to determine if an account existed. Furthermore, no rate limiting was applied...

MapLogin: Bypass verification of email while creating account(No rate limiting enable for verification code)

Hi Team, Bug type : Authentication bypassMissing rate limiting Description : While creating a account user needs to enter a email id and verification has been sent to his email ID.It is a 4 digits code.But there is no rate limiting enable while checking the verification on server side.So basicall...

Cisco TelePresence High Speed IP Message Processing Denial of Service Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A security vulnerability exists in Cisco TelePresence TC and TE, which allows remote attackers to cause a denial-of-service attack due to the program's failure to properly handle high-rate IP messages, allowing them to...

AutoReaver - Mutliple Access Point Targets Attack Using Reaver

AutoReaver is bash script which provides multiple access point attack using reaver and BSSIDs list from a text file. If processed AP reaches rate limit, script goes to another from the list, and so forth. HOW IT WORKS ? Script takes AP targets list from text file in following format BSSID CHANNEL...

High-Speed Packet Generator: MoonGen

MoonGen is a high-speed scriptable packet generator. The whole load generator is controlled by a Lua script: all packets that are sent are crafted by a user-provided script. Thanks to the incredibly fast LuaJIT VM and the packet processing library DPDK, it can saturate a 10 GBit Ethernet link wit...

Jolla Phone URI Spoofing

-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...

Google Chrome Information Disclosure Vulnerability (CNVD-2015-01692)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. An information disclosure vulnerability exists in Google Chrome versions prior to 41.0.2272.76, which arises from the program failing to properly restrict access to high-rate accelerometer data, allowing an...

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

Design/Logic Flaw

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...