7489 matches found
Vimeo: CSRF bypass
Dear Team, Once again i'm here. During research of vimeo.com I found that you are using anti-csrf token against csrf attack. but it's not going to validate on server side. let's see Step 1: go to https://vimeo.com/forgotpassword Step 2: write your email and click on help me. Step 3: Now before...
Password Sniffer Console - Command-line Tool to Sniff and Capture HTTP/FTP/POP3/SMTP/IMAP Passwords
Password Sniffer Console is the all-in-one command-line based Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network. It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of...
Oracle Solaris Third-Party Patch Update : wireshark (multiple_denial_of_service_vulnerabilities2)
The remote Solaris system is missing necessary patches to address security updates : - The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a capture file, as...
Authentication Capture: SMB
This module provides a SMB service that can be used to capture the challenge-response password NTLMv1 & NTLMv2 hashes used with SMB1, SMB2, or SMB3 client systems. Responses sent by this service by default use a random 8 byte challenge string. A specific value such as 1122334455667788 can be set...
Adobe Flash Player Multiple Vulnerabilities-01 (Jan 2015) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Cisco AnyConnect Secure Mobility Client Identity Spoofing Vulnerability
Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. An identity spoofing vulnerability exists in the Cisco AnyConnect Secure Mobility Client, which allows remote attackers to spoof forms of authentication and capture credentials via unspecified vectors...
Design/Logic Flaw
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940...
PT-2015-3721
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect affected versions not specified Description The issue is related to improper host type verification, which allows remote attackers to spoof authentication forms and possibly capture credentials. Recommendations At the moment,...
CVE-2014-3314: Improper Input Validation
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940...
SniffPass - Password Monitoring/Sniffing Software (Web/FTP/Email)
SniffPass is small password monitoring software that listens to your network, capture the passwords that pass through your network adapter, and display them on the screen instantly. SniffPass can capture the passwords of the following Protocols: POP3, IMAP4, SMTP, FTP, and HTTP basic authenticati...
HTTP/HTTPs MITM Proxy and Traffic Recorder: Hyperfox
HTTP/HTTPs MITM Proxy and Traffic Recorder Hyperfox is a security tool for proxying and recording HTTP and HTTPs communications on a LAN Network Hyperfox is capable of forging SSL certificates on the fly using a root CA certificate and its corresponding key both provided by the user. If the targe...
USBPcap - USB Packet capture for Windows (open-source USB Sniffer for Windows)
USBPcap is an open-source USB sniffer for Windows. USB Packet capture for Windows Tour Download USBPcap...
CVE-2014-6153: Undefined Security Weakness
The Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture...
PT-2014-7072
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...
Linux Modules Connected to Turla APT Attacks Discovered
The Turla APT campaigns have a broader reach than initially anticipated after the recent discovery of two modules built to infect servers running Linux. Until now, every Turla sample in captivity was designed for either 32- or 64-bit Windows systems, but researchers at Kaspersky Lab have discover...
[SECURITY] Fedora 21 Update: wireshark-1.12.2-1.fc21
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...
Open Source OpenSOC Security Analytics Framework Released
Cisco announced today that it has made available through open source a framework that integrates data analytics tools into security operations. “The OpenSOC framework helps organizations make big data part of their technical security strategy by providing a platform for the application of anomaly...
Amazon Linux AMI : perl-Capture-Tiny (ALAS-2014-358)
"It was found 1 that the Capture::Tiny module, provided by the perl-Capture-Tiny package, used the File::temp::tmpnam module to generate temporary files : ./lib/Capture/Tiny.pm: $stash-flagfiles$which = scalar tmpnam C Tenable Network Security, Inc. The descriptive text and package checks in this...
PT-2014-5283 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions 8.2 through 8.25.50 Cisco ASA Software versions 8.3 through 8.32.41 Cisco ASA Software versions 8.4 through 8.47.22 Cisco ASA Software versions 8.6 through 8.61.13 Cisco ASA Software versions 9.0 through 9.04.23...
