1717 matches found
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html : A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6...
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html : A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6. ----------------------------- 7. Content-Disposition:...
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
Exploit for php platform in category web applications A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6. ----------------------------- 7. Content-Disposition: form-data;...
Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web
A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
UploadAction.execute vulnerable to CSRF
Sub-issue from CONF-27960. UploadAction.execute upload.action does not have CSRF protection...
CVE-2013-4689
CVE-2013-4689 affects Juniper Junos J-Web, where CSRF protection can be bypassed to hijack administrator authentication. Affected Junos releases include before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before...
RedHat Update for samba3x RHSA-2013:1310-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UniCredit Bank CSRF / XSS / Shell Upload Vulnerabilities
UniCredit Bank suffers from cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. They have not responded to the authors notifications. ============================================================================================== UNICREDITBANK Cross Site...
Moderate: Red Hat Security Advisory: samba3x security and bug fix update
Updated samba3x packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Cisco Global Site Selector Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of Cisco GSS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...
Cetelem Online Bank Cross Site Scripting / Clickjacking
=============================================================================================================================================================================================== CETELEM ON LINE BANK Cross Site Scripting and DOM Based XSS / Clickjacking: X-Frame-Options header missin...
PHP Melody 1.9 CSRF Vulnerabilities
An attacker may force the users of a web application to execute actions of the attacker's choosing. A successful CSRF exploit can compromise end user data and operation in case of normal user. If the targeted end user is the administrator account, this can compromise the entire web application. P...
Spitfire CMS 1.1.4 - Cross-Site Request Forgery
Spitfire CMS 1.1.4 - Cross-Site Request Forgery Exploit Title: spitefire CMS - CSRF / ADD / EDTI / UPLOAD FILE Date: 2013 15 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://spitfire.clausmuus.de/...
Symantec Web Gateway Security Issues
SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console, or the appliance itself. There is also potential for unauthorized database manipulation...
WordPress 3.5.1 Cross Site Scripting
Hello list! These are Cross-Site Scripting vulnerabilities in WordPress. Which I've disclosed last week. At WordPress 3.5.2 release, WP developers mentioned about three holes as "security hardenings" to decrease their importance and to make it looks like there were less fixed holes. One of these...
symfony
This plugin greps every page for traces of the Symfony framework and the lack of CSRF protection. Plugin type Grep Options Name | Type | Default Value | Description | Help ---|---|---|---|--- override | boolean | False | Skip symfony detection and search for the csrf misprotection. | No detailed...
Multiple Vulnerabilities in Kasseler CMS
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Kasseler CMS, which can be exploited to perform SQL injection, Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF attacks and compromise vulnerable application. 1 SQL Injection in Kasseler CMS: CVE-2013-3727 T...
WordPress Plugin Mathjax Latex 1.1 - Cross-Site Request Forgery
Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability Release Date: 25/03/13 Author: Junaid Hussain illSecure Research Group Contact: [email protected] | Website: illSecure.com Software Link: http://downloads.wordpress.org/plugin/mathjax-latex.1.1.zip Tested on...
WordPress Mathjax Latex 1.1 Cross Site Request Forgery
Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability Release Date: 25/03/13 Author: Junaid Hussain illSecure Research Group Contact: [email protected] | Website: illSecure.com Software Link: http://downloads.wordpress.org/plugin/mathjax-latex.1.1.zip Tested on...
