243 matches found
openSUSE Security Update : gnash (openSUSE-SU-2012:0330-1)
gnash used predictable and world readable temporary file names to store HTTP cookies CVE-2011-4328. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnash-5931. The text description of this...
openSUSE Security Update : gnash (openSUSE-SU-2012:0369-1)
gnash used predictable and world readable temporary file names to store HTTP cookies %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-164. The text description of this plugin is C...
openSUSE Security Update : namazu (openSUSE-SU-2011:1327-1)
This update fixes the following security issues : - 732323: CVE-2011-4345: namazu: XSS flaw by processing HTTP cookies CVE-2011-4345 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update namazu-5528...
Connecting the Dots Between Cookies and Identities
A team of computer science engineers from Princeton have released a paper that explains how an adversary with a passive presence on a network or Internet backbone could track individuals by observing HTTP cookies. The motivation for the project was news in December that the National Security Agen...
Debian Security Advisory DSA 2711-1 (haproxy - several vulnerabilities)
Multiple security issues have been found in HAProxy, a load-balancing reverse proxy: CVE-2012-2942 Buffer overflow in the header capture code. CVE-2013-1912 Buffer overflow in the HTTP keepalive code. CVE-2013-2175 Denial of service in parsing HTTP headers. OpenVAS Vulnerability Test $Id:...
[SECURITY] Fedora 19 Update: haproxy-1.4.23-2.fc19
HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread the load among several servers while assuring server persistence through the use of HTTP cookies - switch t...
[Weevely] PHP Stealth Tiny Web Shell
Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...
[SECURITY] Fedora 17 Update: haproxy-1.4.22-1.fc17
HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread the load among several servers while assuring server persistence through the use of HTTP cookies - switch t...
Debian Security Advisory DSA 2435-1 (gnash)
The remote host is missing an update to gnash announced via advisory DSA 2435-1. OpenVAS Vulnerability Test $Id: deb24351.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2435-1 gnash Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian DSA-2435-1 : gnash - several vulnerabilities
Several vulnerabilities have been identified in Gnash, the GNU Flash player. - CVE-2012-1175 Tielei Wang from Georgia Tech Information Security Center discovered a vulnerability in GNU Gnash which is caused due to an integer overflow error and can be exploited to cause a heap-based buffer overflo...
[SECURITY] [DSA 2435-1] gnash security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2435-1 [email protected] http://www.debian.org/security/ Gabriele Giacone March 19, 2012 http://www.debian.org/security/faq - -...
Proventia Network Mail Security System CRLF Injection
Security Advisory: MVSA-10-009 / CVE-2010-0155 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: CRLF Injection Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-009 Description Web-based...
PHP-Nuke 8.1.0.3.5b Command Execution
PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...
PHP-Nuke 8.1.0.3.5b - Remote Command Execution
PHP-Nuke 8.1.0.3.5b - Remote Command Execution PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use...
Oxygen2PHP <= 1.1.3 (member.php) Blind SQL Injection Exploit
Exploit for php platform in category web applications ============================================================ Oxygen2PHP 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$UserName; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 :...
Session Fixation Attack on HTTP Cookies
By manipulating cookies through a vulnerability similar to cross-site scripting, an attacker can set the session cookies. The legitimate user will be logged out of the application and after he logs in again, the cookie will remain unchanged and the attacker will be able to steal the open session...
HTTP cookies import
This plugin imports cookies for all web tests. The cookie file must be in 'Netscape format'. It does not perform any test by itself. TRUSTED...
Mozilla Browsers CSS moz-binding Cross Domain Scripting (CVE-2006-0496)
The Mozilla based web browsers are full featured web browsers which serve as popular alternatives to the Microsoft Internet Explorer. The browsers are capable of interpreting HTML, JavaScript, CSS, as well as a myriad of other popular Internet standard formats. The Mozilla based browsers are...
PunBB Reputation.php Mod <= 2.0.4 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Local File Inclusion Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew registerglobals = On magicquotesgpc = On use LWP::UserAgent; use HTTP::Cookies; use strict; my $EtcPassw...
PunBB Reputation.php Mod 2.0.4 - Local File Inclusion
!/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00"; my $Get =...