RecScanSec - Reconnaisance Scanner Security

RecScanSec made for reconnaisance Scanner and information gathering with an emphasis on simplicity. It will do everything from. Features Information Security Headers WAF Analyzer Information Disclosure Banner Grabbing Url Crawl HTML Form Detector Port Scanner Get SSL Information Subdomain...

ReconT - Reconnaisance / Footprinting / Information Disclosure

Recon-Tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from. Features Information Security Headers WAF Detector Banner Grabbing Phone Number Credit Card Number Email US Social Security Number Url Crawl Dom Paramter Url Internal Dynamic...

Session Fixation

firefox is vulnerable to session fixation. The vulnerability exists as firefox does not properly interpret Set-Cookie headers within response that have a 407 status code...

Man-in-the-Middle (MitM)

firefox/thunderbird is vulnerable to man-in-the-middle attacks. The address bar can be spoofed by operating a proxy server that provides a 407 HTTP status code accompanied by a malicious web script...

Input validation

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation...

CVE-2016-4643

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation...

Secure Web with PAC File unable to authenticate fails with http 407 error

While evaluating XenMobile with Secure Web with PAC File,Webproxy after reading the PAC file request Authentication, but it seems that Secure Web does not provide authentication. Therefore we get an Authentication failure from the Webproxy on the webpage of the Proxy within Secure Web. MDX Settin...

Troubleshooting XenCenter Proxy Authentication Issues

XenCenter does not connect to a proxy server One common problem with using a proxy server is that the client XenCenter can’t connect to it. You may receive the following error when trying to connect to a XenServer host after configuring to use a proxy server in XenCenter: You may also receive the...

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

Overview HTTP CONNECT requests and 407 Proxy Authentication Required messages are not integrity protected and are susceptible to man-in-the-middle attacks. WebKit-based applications are additionally vulnerable to arbitrary HTML markup and JavaScript execution in the context of the originally...

Debian DLA-407-1 : prosody security update

The flaw allows a malicious server to impersonate the vulnerable domain to any XMPP domain whose domain name includes the attacker's domain as a suffix. For example, 'bber.example' would be able to connect to 'jabber.example' and successfully impersonate any vulnerable server on the network. This...

Blue Coat Systems ProxySG SGOS Information Disclosure Vulnerability

Blue Coat Systems ProxySG is a suite of secure Web gateway appliances from Blue Coat Systems, USA. The appliance provides user authentication, Web filtering, and data loss protection to control all Web traffic. A security vulnerability exists in the default configuration of SGOS in Blue Coat...

CVE-2015-4334

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...

Default configuration

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...

CVE-2015-4334

CVE-2015-4334 affects Blue Coat ProxySG SGOS when deployed as an explicit proxy. The default configuration forwards authentication challenges from upstream origin content servers, enabling a remote attacker to obtain sensitive information via HTTP 407 responses. Affected SGOS versions are before ...

rt.com XSS vulnerability

Vulnerable URL: https://www.rt.com/search/?q=x=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 407 Google Pagerank| 7 VIP website status:| Yes Check rt.com SSL connection:| Grade:...

Amazon Linux: Security Advisory (ALAS-2014-407)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

photobucket.com XSS vulnerability

Vulnerable URL: http://photobucket.com/images/%22%3E%3C/textarea%3E%3C%3CsCRipT%3Ealert%28%22XSSPOSED%22%29;//%3C%3C/sCRipT%3E%3Ctextarea%20rows=1%20cols=1%3E%3Cinput%20value=%22 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:09 GMT...

CVE-2015-1229

net/http/proxyclientsocket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 aka Proxy Authentication Required HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

UBUNTU-CVE-2014-8639

Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 aka Proxy Authentication Required status code, which allows remote HTTP proxy servers to conduct session...

Netopia Timbuktu Pro Remote Control 2.0/5.2.1 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process will need to be killed and the...