CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

gnutls 3.6.6 - verify_crt() Use-After-Free

gnutls 3.6.6 - verifycrt Use-After-Free Description of problem: This is a critical memory corruption vulnerability in any API backed by verifycrt, including gnutlsx509trustlistverifycrt and related routines. I suspect any client or server that verifies X.509 certificates with GnuTLS is likely...

Brother Debut http Denial Of Service

The Debut embedded HTTP server use auxiliary/dos/http/brother/debutdos msf undefineddebutdos show actions ...actions... msf undefineddebutdos set ACTION msf undefineddebutdos show options ...show and set options... msf undefineddebutdos run This module requires Metasploit:...

[SECURITY] Fedora 25 Update: mingw-gtk-vnc-0.7.0-1.fc25

gtk-vnc is a VNC viewer widget for GTK. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded...

[SECURITY] Fedora 24 Update: gtk-vnc-0.7.0-1.fc24

gtk-vnc is a VNC viewer widget for GTK2. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded...

openssl security update

1.0.1e-48.4 - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts...

Fedora Update for Perlbal FEDORA-2008-2788

Check for the Version of Perlbal OpenVAS Vulnerability Test Fedora Update for Perlbal FEDORA-2008-2788 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Server: temporary DoS via crafted pattern searches

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service CPU consumption and search outage via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

Pyramid Research Project - atphttpd security advisorie

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -=================================================================- SECURITY ADVISORY PYR/MID, Research Project - 101002 Members: Apm, flea, thread Title: ATP HTTP Daemon v0.4b Buffer Overflow Author: thread Vulnerable: ATP HTTP Daemon = v0.4b...