CVE-2021-47229

In the Linux kernel, the following vulnerability has been resolved: PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not yet completed which is indicated by value 1 in PIOSTART causes an...

PT-2023-31756 · Mvel2 · Mvel2

Name of the Vulnerable Software and Affected Versions: mvel2 version 2.5.0 Final Description: A TimeOut error exists in the ParseTools.subCompileExpression method due to many Java class lookups, potentially causing a long execution time. The vendor disputes the significance of this issue, stating...

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

GSD-2023-1001345 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out

wifi: ar5523: Fix use-after-free on ar5523cmd timed out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

Citrix PVS 1912: VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule

VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule...

Design/Logic Flaw

In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...

CVE-2021-43173

In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...

CVE-2021-43173

In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...

PT-2021-23758 · Nlnet +1 · Routinator +1

Name of the Vulnerable Software and Affected Versions: NLnet Labs Routinator versions prior to 0.10.2 Description: A validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that stems fr...

curl: Connect-only connections can use the wrong connection

Summary: If a connect-only easy handle is not read from or written to, its connection can time out and be closed. If a new connection is created it can be allocated at the same address, causing the easy handle to use the new connection. This new connection may not be connected to the same server ...

Command injection

An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VAL1 should be enclosed in quotes to prevent the potential for Bash command injection. Further to...

Infogram: Is the 504 Gateway Time-out error ok?

Link: https://infogram.com/api/merge/auth/google/?redirectto=123&token=gulHMyL6-1H0Am4zXa4H7j0DWomPdnKPhZOk&redirectto=123 it gives 504 after a long time! Is it normal? It can be used for DOS! I use two redirectto= if I use just one redirectto= it gives the response fastly!...

Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2

Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2 Symptoms Consider the following scenario: You try to install a Windows Update package that is marked as Important on a computer that is running...

Visual Ping 0.8.0.0 - 'Host' Denial of Service (PoC)

Exploit Title: Visual Ping 0.8.0.0 - 'Host' Denial of Service PoC Date: 2018-08-30 Exploit Author: Uriel Corral Salinas Vendor Homepage: http://www.itlights.com Software Link: http://www.scanwith.com/download/FreeVisualPing.htm Version: Free Visual Ping Version 0.8.0.0 Tested on: Windows 10 Pro x...

sub6 - Web App Scanner

subdomain take over detector and crawler. Usage python sub6.py -i list.txt -o output.txt -s phpinfo.php -x 4 +Options -i input files twitterdomains.txt if many separate by comma -o output file twitterResult.txt -p protocol http or https -s suffix phpinfo.php used to look for ceratin files CTF mod...

FAQ: Time-Out with Password Caching on XenMobile

Question : What is the expectations of time-outs with the combinations of Enable Password Caching on XenMobile Server? Answer : Enable Password Cache : false Secure PIN authentication on XenMobile Apps after INACTIVITYTIMER expires. Active Directory password authentication on Secure Hub when...

Uber: Pixel flood attack in https://riders.uber.com/profile

Hi, It is the exact issue described here: https://hackerone.com/reports/390 Where uploading lottapixel.jpg it causes your service to time out HTTP/1.1 504 Gateway Time-out Server: nginx Date: Wed, 30 Mar 2016 02:29:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13928 Connection:...