514 matches found
BlueCoat CAS 1.3.7.1 Privilege Escalation
Exploit Title: OS Command Injection Vulnerability in BlueCoat ASG and CAS Date: April 3, 2017 Exploit Authors: Chris Hebert, Peter Paccione and Corey Boyd Contact: chrisdhebertatgmail.com Vendor Security Advisory: https://bto.bluecoat.com/security-advisory/sa138 Version: CAS 1.3 prior to 1.3.7.4 ...
Bluecoat ASG 6.6/CAS 1.3 - Local Privilege Escalation (Metasploit)
Exploit Title: OS Command Injection Vulnerability in BlueCoat ASG and CAS Date: April 3, 2017 Exploit Authors: Chris Hebert, Peter Paccione and Corey Boyd Contact: chrisdhebertatgmail.com Vendor Security Advisory: https://bto.bluecoat.com/security-advisory/sa138 Version: CAS 1.3 prior to 1.3.7.4 ...
SA144 : OpenSSH Vulnerabilities January 2017
SUMMARY Blue Coat products using affected versions of OpenSSH are susceptible to several vulnerabilities. A remote attacker with access to an SSH server can exploit these vulnerabilities to execute arbitrary code on an SSH client. A local attacker can also exploit these vulnerabilities to obtain...
SA129 : Multiple libxml2 Vulnerabilities
SUMMARY Blue Coat products that include a vulnerable version of the libxml2 library are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary code and cause denial of service through memory corruption. AFFECTED PRODUCTS The following...
SA130 : Security Control Bypass Vulnerability in ProxySG, ASG, and CacheFlow
SUMMARY Some HTTP and HTTPS requests may trigger reverse DNS RDNS lookups in ProxySG, ASG, and CacheFlow. When these products are configured with policy rules that use hostnames from RDNS lookup results, such requests may bypass security controls such as blocking a request, requiring user...
SA124 : NSS Vulnerabilities March 2016
SUMMARY Blue Coat products that include affected versions of NSS are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to cause denial of service through application crashes, or to possibly execute arbitrary code. AFFECTED PRODUCTS The following products...
SA120 : Truncated Diffie-Hellman Secret Generation in libssh2
SUMMARY Blue Coat products that include affected versions of libssh2 are susceptible to a truncated Diffie-Hellman secret length vulnerability. A remote man-in-the-middle MITM attacker can exploit this vulnerability to intercept SSH connections that originate from Blue Coat products. The MITM...
网康 NS-ASG 6.2 用安全网关 /admin/cert_download.php 任意 文件下载
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /WebPages/history.php uid参数SQL注入漏洞
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /3g/menu.php uid参数SQL注入漏洞
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /WebPages/login.php errstr参数XSS漏洞
No description provided by source...
网康 NS-ASG /admin/export_log.php type参数存在越权日志下载
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /protocol/iscdevicestatus/getsysdatetime.php 命令执行漏洞
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /debug/list_logfile.php 任意文件删除&任意命令执行漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /debug/rproxy_diag.php 任意文件下载漏洞
No description provided by source...
NS-ASG 应用安全网关 resetpwd.php等10处 SQL注入漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 6.3 vpnweb/resetpwd/resetpwd.php 等文件 SQL注入漏洞
No description provided by source...