CVE-2016-8672

CVE-2016-8672 concerns the SIMATIC web server delivering cookies without the Secure attribute. Affects SIMATIC CP 343-1 Advanced (incl. SIPLUS NET) < v3.0.53 and CP 443-1 Advanced

HP Integrated Lights-Out Cross-Site Scripting Vulnerability

HP Integrated Lights-Out is used for remote management of servers. A cross-site scripting vulnerability exists in HP Integrated Lights-Out. Due to the program failing to adequately filter user-supplied input. An attacker could exploit this issue to execute arbitrary HTML and script code in an...

U.S. Dept Of Defense: Reflected XSS on a Department of Defense website

A Department of Defense website was vulnerable to a reflected cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by craftin...

U.S. Dept Of Defense: Reflected XSS on an Army website

A U.S. Army website was vulnerable to a cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a specially formatte...

SIMATIC S7-300/S7-400 CPU family information disclosure vulnerability

Siemens SIMATIC S7-300/S7-400 CPU families are used to provide discrete and continuous control in industrial environments such as manufacturing, food and beverage, and global chemical industries. An information disclosure vulnerability exists in the SIMATIC S7-300/S7-400 CPU family. Due to the...

U.S. Dept Of Defense: Reflected XSS on a Navy website

A U.S. Navy website was vulnerable to a reflected cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. samux was able to demonstrate this vulnerability by crafting a specially...

U.S. Dept Of Defense: Reflected XSS on a Department of Defense website

A Department of Defense website was vulnerable to a reflected cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by craftin...

Mezzanine 4.2.0 - Cross-Site Scripting

Mezzanine 4.2.0 - Cross-Site Scripting Security Advisory - Curesec Research Team 1. Introduction Affected Product: Mezzanine 4.2.0 Fixed in: 4.2.1 Fixed Version Link: https://github.com/stephenmcd/mezzanine/releases/tag/4.2.1 Vendor Website: http://mezzanine.jupo.org/ Vulnerability Type: XSS Remo...

[SECURITY] Fedora 25 Update: curl-7.51.0-1.fc25

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Stored Cross-Site Scripting Vulnerability in Dream CMS V1.4

Dream cms, abbreviated as "lmxcms", is an open source website management system cms with no license restrictions. Dream CMS V1.4 management background can be modified through the content management function of the page description to trigger the storage of cross-site scripts, allowing attackers t...

SPIP 3.1 Cross Site Scripting / Header Injection

Security Advisory - Curesec Research Team 1. Introduction Affected SPIP 3.1 Product: Fixed in: 3.1.2 / 3.0.23 Fixed Version http://www.spip.net/endownload Link: Vendor Website: http://www.spip.net/ Vulnerability Reflected & Persistent XSS, Host Header Injection, httpOnly Type: Cookie disclosure...

PoisonTap Steals Cookies, Drops Backdoors From Password Protected Computers

Even locked, password-protected computers are no rival for Samy Kamkar and his seemingly endless parade of gadgets. His latest, PoisonTap, is a $5 Raspberry Pi Zero device running Node.js that’s retrofitted to emulate an Ethernet device over USB. Assuming a victim has left their web browser open,...

This $5 Device Can Hack your Password-Protected Computers in Just One Minute

You need to be more careful next time while leaving your computer unattended at your office, as it cost hackers just $5 and only 30 seconds to hack into any computer. Well-known hardware hacker Samy Kamkar has once again devised a cheap exploit tool, this time that takes just 30 seconds to instal...

php: type confusion issue in Soap Client call() method

The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service NULL pointer dereference, type confusion, and application crash or possibly execute...

ShopZilla Comparision Shopping Script 2.3 Cross Site Scripting

======================================================================== | Title : shopzilla Comparison Shopping Script v2.3 xss vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.3 | Vendor :...

WAFNinja - Penetration testers favorite for WAF Bypassing

WAFNinja is a CLI tool written in Python. It shall help penetration testers to bypass a WAF by automating steps necessary for bypassing input validation. The tool was created with the objective to be easily extendible, simple to use and usable in a team environment. Many payloads and fuzzing...

Debian DSA-3705-1 : curl - security update

Several vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. - CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case...

cURL/libcURL Information Disclosure Vulnerability (CNVD-2016-10794)

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. The UAF vulnerability stored in cURL/libcURL allows attackers to exploit the vulnerability to obtain sensitive information by sharing cookies...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2016-10752)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC. A remote attacker could exploit the vulnerability ...

Ubuntu 14.04 LTS / 16.04 LTS : curl vulnerabilities (USN-3123-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3123-1 advisory. It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to...