Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...

Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability

No description provided by source. Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines &...

Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability

Exploit for unknown platform in category web applications ============================================================ Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability ============================================================ Pentest Information: ==================== GESEC Team...

Barracuda Web Application Firewall 660 - '/cgi-mod/index.cgi' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/37432/info The Barracuda Web Application Firewall 660 is prone to multiple HTML-injection vulnerabilities. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based...

Barracuda IM Firewall smtp_test.cgi脚本跨站脚本执行漏洞

BUGTRAQ ID: 37248 Barracuda IM Firewall是一种针对即时通信流量的进行检测防护工具。 Barracuda IM Firewall的实现上存在多个跨站脚本执行漏洞，攻击者可能利用此漏洞在用户的浏览器中执行任意脚本代码，导致信息泄露或其他攻击。 0 Barracuda Networks IM Firewall 4.0.01.003 厂商补丁： Barracuda Networks ------------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Barracuda IM Firewall Detection (HTTP)

This host is running Barracuda IM Firewall. Barracuda IM Firewall control and manage internal and external instant messaging IM traffic. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Barracuda IM Firewall 'smtp_test.cgi' Cross-Site Scripting Vulnerabilities

Barracuda IM Firewall is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Barracuda IM Firewall 'smtp_test.cgi' Cross-Site Scripting Vulnerabilities

Barracuda IM Firewall is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit...

Barracuda IM Firewall Detection

This host is running Barracuda IM Firewall. Barracuda IM Firewall control and manage internal and external instant messaging IM traffic. OpenVAS Vulnerability Test $Id: barracudaimfirewalldetect.nasl 7268 2017-09-26 08:43:43Z cfischer $ Barracuda IM Firewall Detection Authors: Michael Meyer...

Barracuda IMFirewall 620 - Multiple Vulnerabilities

PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracuda IM Firewall. A remote attacker is able to get sensitive customer sessions client-sideor can implement evil script routines & malicious codesserver-side. Details ======= Test...

Barracuda IMFirewall 620 Vulnerability

Exploit for unknown platform in category web applications ====================================== Barracuda IMFirewall 620 Vulnerability ====================================== PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracud...

Barracuda IMFirewall 620 Vulnerability

No description provided by source. PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracuda IM Firewall. A remote attacker is able to get sensitive customer sessions client-sideor can implement evil script routines & malicious...

Barracuda IMFirewall 620 - Multiple Vulnerabilities

Barracuda IMFirewall 620 - Multiple Vulnerabilities PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracuda IM Firewall. A remote attacker is able to get sensitive customer sessions client-sideor can implement evil script routine...

SSL and TLS protocols renegotiation vulnerability

Overview A vulnerability exists in SSL and TLS protocols that may allow attackers to execute an arbitrary HTTP transaction. Description The Secure Sockets Layer SSL and Transport Layer Security TLS protocols are commonly used to provide authentication, encryption, integrity, and non-repudiation...

Barracuda IMG.PL Remote Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Barracuda...

Barracuda Load Balancer - realm Cross-Site Scripting

Barracuda Load Balancer - realm Cross-Site Scripting source: https://www.securityfocus.com/bid/33779/info Barracuda Load Balancer is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities (SQLi, XSS)

Binary data 4795.prm...

CVE-2008-1094

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...

Sql injection

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Barracuda Spam Firewall BSF before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or...