farazpajohan vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote malicious user to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.

Mikrotik Routeros 6.38.5

1 EDB exploit

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an...

Linux Linux Kernel

1 EDB exploit

MikroTik v6.40.5 devices allow remote malicious users to cause a denial of service via a flood of ICMP packets.

Mikrotik Router Firmware 6.40.5

1 EDB exploit

BackBox Linux 4.6 allows remote malicious users to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendo...

Backbox Backbox Linux 4.6

1 EDB exploit

tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.

Broadcom Tcpreplay 3.4.4

1 EDB exploit

The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exp...

Mikrotik Routeros 6.25

1 EDB exploit

A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote malicious user to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from acce...

Mikrotik Router Firmware 6.41.4

1 EDB exploit

Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution o...

Mor-pah.net Dmitry Deepmagic Information Gathering Tool 1.3a

1 EDB exploit

Stack-based buffer overflow in dnstracer up to and including 1.9 allows malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An exam...

Dnstracer Project Dnstracer

2 EDB exploits3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook