AirDroid security flaw allows hackers to perform Dos attack from your Android device.

AirDroid, a free app which provides wireless management of your Android phone or tablet from any browser on the same Wi-Fi network, has a dangerous cross-site scripting (XSS) vulnerability which allow hackers  to perform Dos attack from your Android device.

Cross Site scripting or XSS vulnerability in the browser version of AirDroid allows an attacker to send a malicious text message to the browser associated with the account when attacker is able to get access to a phone with AirDroid installed.

According to the Department of Homeland Security’s  Vulnerability Notes Database ,
"When this message is viewed on the AirDroid web interface an attacker
can initiate a cross-site scripting attack, which may result in information leakage, privilege escalation, and denial of service on the host computer.

There is no patch at this time for this vulnerability. As a general good security practice, only allow connections from trusted hosts and networks. Note that restricting access does not prevent XSS, CSRF, or SQLi attacks since the attack comes as an HTTP request from a legitimate user’s host. But Restricting access would prevent an attacker from accessing the AirDroid web interface using stolen credentials from a blocked network location.”