158 matches found
WAP - Web Application Protection
WAP is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-site...
Apple iOS Safari WebKit Security Bypass Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in WebKit in Apple Safari used in Apple iOS, which can be exploited by attackers to perform man-in-the-middle attacks and obtain sensitive information through sniffing the...
HP Universal Configuration Management Database Data Flow Probe Gateway Detection
Binary data hpucmdbprobegatewaydetect.nbin...
IE GC information leakage the vulnerability of the gossip-vulnerability warning-the black bar safety net
This vulnerability is several months earlier dion cow release, also recently got a pwnie award of the prize, the original speaking of the flash, ff, etc. of the GC engine are the use of conserved marker removal algorithm and are not tag data or pointer, so the presence of this problem, dion cattl...
Web Application Protection - Tool to detect and correct vulnerabilities in PHP web applications
WAP 2.0 is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher and with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-si...
Multipath TCP
Multipath TCP is a set of extensions to regular TCP that enables a single data flow to be separated and carried across multiple connections. An attacker might use these extensions to evade detection by IPS devices...
Microsoft Releases Free Threat Modeling Tool 2014
Threat modeling has been part of the security culture at Microsoft for the better part of a decade, an important piece of the Security Development Lifecycle that’s at the core of Trustworthy Computing. Today, Microsoft updated its free Threat Modeling Tool with a number of enhancements that bring...
Design/Logic Flaw
The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...
CVE-2011-4705
CVE-2011-4705 affects the Ming Blacklist Free Android app, versions 1.8.1 and 1.9.2.1. The issue is an inadequate protection of data, enabling remote attackers to read or modify the app’s blacklists and a contacts list through a crafted application that triggers a “data-flow attack.” The availabl...
Cisco IOS dot1x端口处理多个远程拒绝服务漏洞
BUGTRAQ ID: 50375 CVE ID: CVE-2011-2057,CVE-2011-2058 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。数据流交互功能DLSw可以实现在IP网络上传输IBM SNA和网络BIOS流量。 Cisco IOS在处理dot1x端口时存在多个远程拒绝服务漏洞，可造成受影响设备停止响应，导致拒绝服务。 Cisco IOS 12.x 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cisco.com/warp/public/707/advisory.h...
Microsoft IIS交换数据流绕过认证漏洞(MS10-065)
BUGTRAQ ID: 41314 CVE ID: CVE-2010-2731 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS没有正确地处理目录的基础认证，远程攻击者可以在请求的目录名后附加NTFS流名称和流类型（:$i30:$INDEXALLOCATION）绕过认证访问受保护的目录。 Microsoft IIS 5.1 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-065）以及相应补丁:...
ICAP adaptation: missing data flow control to client side
Summary ======= squid proxys ICAP adaptation is missing data flow control to client side. Thus blocking clients may cause a denial of service condition when requesting huge downloads. Affected Versions ================= All squid 3.x versions Not vulnerable ============== None of phions HTTP prox...
Tor Replay Attack Vulnerability (Windows)
This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Replay Attack Vulnerability in Tor (Linux)
This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Tor <= 0.2.0.34 Replay Attack Vulnerability - Linux
Tor Anonymity Proxy is prone to replay attack vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tor Replay Attack Vulnerability - Windows
Tor Anonymity Proxy is prone to replay attack vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft IE数据流处理远程代码执行漏洞（MS08-024）
BUGTRAQ ID: 28552 CVECAN ID: CVE-2008-1085 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理数据流时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户使用Internet Explorer查看了特制网页，网页就可能返回没有注册处理器的非预期MIME类型数据流，触发释放后使用的情况，导致执行任意代码。帐户被配置为拥有较少用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...
