PT-2018-17775

Name of the Vulnerable Software and Affected Versions DuckDuckGo version 4.2.0 Description The issue concerns the WebRTC component, which can disclose a private IP address in a STUN request after visiting a website that attempts to gather complete client information, such as https://ip.voidsec.co...

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6608: Exposure of Sensitive Information to an Unauthorized Actor

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

PT-2018-17666

Name of the Vulnerable Software and Affected Versions Opera version 51.0.2830.55 Description The issue allows a website to gather complete client information, potentially disclosing a private IP address in a STUN request after visiting a site, such as https://ip.voidsec.com, that attempts to...

stun-l.com XSS vulnerability

Vulnerable URL: http://stun-l.com/pc/item/index.cgi?new===sale=code====11==0=1dh=0=1====100===&det6;=code=cacdact=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...

CVE-2017-5388

A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox 51...

UBUNTU-CVE-2017-5388

A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox 51...

PT-2017-16475

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 51 Description A denial of service attack can be performed by utilizing a STUN server in conjunction with multiple webkitRTCPeerConnection objects, which can send large STUN packets in a short period due to the lack o...

DNSChanger Malware is Back! Hijacking Routers to Target Every Connected Device

Next time when you see an advertisement of your favorite pair of shoes on any website, even if it is legitimate, just DO NOT CLICK ON IT. …Because that advertising could infect you in such a way that not just your system, but every device connected to your network would get affected. A few days...

DNSChanger Exploit Kit Hijacks Routers, Not Browsers

Attackers are targeting more than 166 router models with an exploit kit called DNSChanger that is being distributed via malvertising. Researchers at Proofpoint said the exploit kit is unique because the malvertising component of the attack doesn’t target browsers, rather a victim’s router. Some o...

Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco TelePresence Server devices running software version 3.1 could allow an unauthenticated, remote attacker to reload the device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco TelePresence Server Malformed STUN Packet Processing DoS (cisco-sa-20160406-cts2)

According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability due to improper processing of malformed Session Traversal Utilities for NAT STUN packets. An unauthenticated, remote attacker can exploit this, via...

Cisco TelePresence Server Denial of Service Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. Cisco TelePresence Server version 3.1 fails to properly handle malformed STUN packets, which can allow an unauthenticated remote attacker to cause the affected device to reload...

Code injection

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

CVE-2015-6312

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

CVE-2015-6312

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

CVE-2015-6312

Cisco TelePresence Server 3.1 (on 7010, MSE 8710, Multiparty Media 310/320 and VM devices) is affected by CVE-2015-6312 due to improper processing of malformed STUN packets. An unauthenticated, remote attacker could cause a denial of service by forcing the device to reload, which also disrupts on...

Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco TelePresence Server devices running software version 3.1 could allow an unauthenticated, remote attacker to reload the device. The vulnerability exists due to a failure to properly process malformed Session Traversal Utilities for NAT STUN packets. An attacker could explo...

PT-2016-1640

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server version 3.1 Description The issue is caused by a buffer overflow in the Cisco TelePresence Server's software, allowing remote attackers to cause a denial of service device reload by sending malformed STUN packets...

CVE-2015-6312: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...