https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:36:06 +0000 https://cve.radiocsirt.org/vuln/cve-2014-3648 <p><strong>Affected:</strong> Jboss Aerogear</p> <p>The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can&#39;t be reached or can slow the server down by purposefully wasting it&#39;s time with slow endpoints. Similarly, one can provide whatever HTTP end point they want. This turns the server into a DDOS vector or an anonymizer for the posting of malware and so on.</p> <p><strong>Affected:</strong> Jboss Aerogear</p> <p>The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can&#39;t be reached or can slow the server down by purposefully wasting it&#39;s time with slow endpoints. Similarly, one can provide whatever HTTP end point they want. This turns the server into a DDOS vector or an anonymizer for the posting of malware and so on.</p> https://cve.radiocsirt.org/vuln/cve-2014-3648