866 matches found
Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability
No description provided by source. Title: ====== Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability Date: ===== 2013-07-20 References: =========== http://vulnerability-lab.com/getcontent.php?id=775 BARRACUDA NETWORK SECURITY ID: BNSEC-723 VL-ID: ===== 775 Common Vulnerability Scori...
Barracuda Networks Spam & Virus Firewall <= 4.1.1.021 Remote Configuration Retrieval
No description provided by source. !/bin/bash Exploit by ShadowHatesYou [email protected] The resulting output is an SQL dump containing the Barracuda's configuration, which includes goodies such as: The administrative password for the BSFsystempassword MTA LDAP passwordsmtaldapadvancedpasswor...
Barracuda Web Application Firewall 660 'cgi-mod/index.cgi' Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37432/info The Barracuda Web Application Firewall 660 is prone to multiple HTML-injection vulnerabilities. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...
Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities
No description provided by source. ? Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities Vendor: Barracuda Networks, Inc. Product web page: https://www.barracuda.com Affected version: 2.3.3.193, Model: V680 Summary: The Barracuda SSL VPN is a powerful plug-and-play applian...
Barracuda Load Balancer 'realm' Parameter Cross Site Scripting Vulnerability
No description provided by source...
Barracuda Control Center 620 - Multiple Web Vulnerabilities
No description provided by source. Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=32 VL-ID: ===== 32 Introduction: ============= Barracuda Networks - Worldwide leader in...
Barracuda Spam Firewall 3.5.11.020, Model 600 - SQL Injection Vuln
No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...
Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities
No description provided by source...
Barracuda Firewall 6.1.0.016 - Multiple Vulnerabilities
No description provided by source. Document Title: =============== Barracuda Bug Bounty 30 Firewall - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC: BNSEC-2067 Video:...
Barracuda Spam Firewall <= 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29340/info Barracuda Spam Firewall is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Barracuda IMG.PL Remote Command Execution
No description provided by source. $Id: barracudaimgexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected]...
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Vulnerability
No description provided by source. Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines &...
Barracuda多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞
CVE ID:CVE-2014-0160 Barracuda多个产品存在安全漏洞。 Barracuda所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Barracuda CudaTel Communication Server 2.x Barracuda CudaTel Communication Server 3.x Barracuda Firewall 6.x Barracuda Link Balancer 2.x Barracuda...
Barracuda Backup "remote_host"脚本注入漏洞
Barracuda Networks Backup是一款网络备份解决方案。 由于通过"remotehost" POST参数传递到Extern Backup模块的输入在被使用前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 Barracuda Backup Barracuda Backup 固件版本4.3.06或5.1.00已修复此漏洞，建议用户下载使用： http://www.barracudanetworks.com/ns/products/backupoverview.php...
Barracuda Message Archiver 650 - Persistent Web Vulnerability
Document Title: =============== Barracuda Message Archiver 650 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=751 Barracuda Networks Security ID BNSEC: 703 Release Date: ============= 2014-02-18 Vulnerability Laboratory ID...
Barracuda Message Archiver crossite scripting
Web interface crossite scripting...
Threatglass Tool Gives Deep Look Inside Compromised Sites
Trying to enumerate the compromised sites on the Internet is a Sisyphian task. Luckily, it’s not a task that anyone really needs to perform any longer, especially now that Barracuda Labs has released its new Threatglass tool, a Web-based frontend that allows users to query a massive database of...
Barracuda Networks Backup 'Extern Backup' HTML注入漏洞
Bugtraq ID:65850 Barracuda Networks Backup是一款网络备份解决方案。 Barracuda Networks Backup 'Extern Backup'模块不正确过滤用户提交的remotehost值输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Barracuda Networks Backup 目前没有详细解决方案提供： http://www.barracudanetworks.com/ns/products/backupoverview.php div...
Barracuda Firewall 'username'参数HTML注入漏洞
Bugtraq ID:65863 Barracuda Firewall是一款梭子鱼网络有限公司发行的防火墙。 Barracuda Web Firewall 6.1.0.016 Models: X100; X200; X300; X400 & X600 WEB接口User Access Policy Exceptions字段不正确过滤用户提交的'username'参数数据，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Barracuda Web Firewall 6.1.0.016 目前没有详细解决方案提供：...