287 matches found
The use of SSRF vulnerability to take over the APP server-the vulnerabilities and early warning-the black bar safety net
SSRF attack refers to an attacker forcibly control the presence of vulnerabilities of the server,thereby sending a malicious request to a third party server or internal resources. And then use the vulnerability to launch specific attacks,such as cross-site port attacks,service enumeration, and a...
Authentication flaw
Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the Activation Lock protection mechanism via unspecified vectors...
[SECURITY] Fedora 16 Update: bacula-5.0.3-33.fc16
Bacula is a set of programs that allow you to manage the backup, recovery, and verification of computer data across a network of different computers. It is based on a client/server architecture and is efficient and relatively easy to use, while offering many advanced storage management features...
Microsoft Windows 8 with Resilient File System (ReFS)
Microsoft Windows 8 with Resilient File System ReFS Microsoft is switching to the Resilient File System for Windows 8, but only the server edition will support the new and more robust file system. While Windows 8 client machines will continue to use the NTFS filesystem. ReFS is meant to maintain...
CA Products Message Engine RPC Server Opcode 45 Buffer Overflow (CVE-2006-5143)
Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Dat...
Jamroom 3.3.8 - Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data. Very few technical details are available regarding the remaining...
