PT-2018-6645

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: The issue arises from improper input validation for wmi...

Design/Logic Flaw

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

DEBIAN-CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12989

The CVE-2017-12989 issue affects tcpdump before 4.9.2, where the RESP parser (print-resp.c:resp_get_length()) could enter an infinite loop, enabling a denial of service. Public sources show CVSSv3 base 7.5 (HIGH) with network access, low attack complexity, no authentication, and availability impa...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

Tcpdump RESP Parser Denial of Service Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RESP parser is one of the RESP protocol parsers. A denial of service...

CVE-2017-12989: Loop with Unreachable Exit Condition

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

UBUNTU-CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

PT-2016-7335

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.4.15 GnuTLS versions 3.5.x prior to 3.5.4 Description The issue concerns the gnutls ocsp resp check crt function, which does not verify the serial length of an OCSP response. This could potentially allow remote...

QIWI: [contact-sys.com] XSS /ajax/transfer/status trn param

Уязвимый сценарий: https://contact-sys.com/ajax/transfer/status Уязвимый параметр: trn Некорректный content-type. Нормальный пейлоад блокируется WAFом. PoC html XSS" / document.getElementById"xss".submit; HTTP Request http POST /ajax/transfer/status HTTP/1.1 Host: contact-sys.com User-Agent:...

Joomla Component JooBB 0.5.9 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Joomla Component JooBB 0.5.9 Blind SQL Injection Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print...