9 matches found
http-stalling-detector
HTTP Stalling Detector HTTP 停滞型 DoS 攻击利用的是 Web 服务器无法判断远程客户端仅仅是连接在慢速链路上，还是故意以非常慢的速度发送数据，以避免 Web 服务器因超时而关闭连接以保留本地系统资源。攻击者通常表现出的行为是打开大量连接，并缓慢地吐出数据，以防止 Web 服务器将连接超时。如果 Web 服务器使用的工作进程池较小，这种资源耗尽很容易达到。 许多现代 Web 服务器已经对这些类型的资源耗尽攻击有了更强的防御能力，但关注这些攻击仍然很重要，而且很有可能在生产网络中仍然存在大量易受攻击的 Web 服务器。Web...
EUVD-2025-176332
Malicious code in slow-data-moon-object-serialize npm...
Malicious code in slow-data-moon-object-serialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c49854e181d4118e50a6f9910fd6b567e67cd382a7ff14982b0a228063d3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Security Bulletin: Moment.js issue of validating, manipulating, and formatting dates
Summary Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm server users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale...
SUSE CVE-2024-39920
The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system to any server, when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the...
PT-2024-28734 · Tcp · Tcp
Name of the Vulnerable Software and Affected Versions: TCP protocol affected versions not specified Description: The issue is related to a timing side channel in the TCP protocol, making it easier for remote attackers to infer the content of one TCP connection from a client system to any server...
SUSE CVE-2017-15268
Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c...
