3966 matches found
Google Chrome < 31.0.1650.48 - HTTP 1xx base::StringTokenizerT<...>::QuickGetNext Out-o
Exploit for multiple platform in category dos / poc ''' Source: http://blog.skylined.nl/20161219001.html Synopsis A specially crafted HTTP response can allow a malicious web-page to trigger a out-of-bounds read vulnerability in Google Chrome. The data is read from the main process' memory. Known...
Mail.ru: [cooking.lady.mail.ru] Open Redirect
PoC Chrome, IE: https://cooking.lady.mail.ru/%09/blackfan.ru Chrome, IE, FireFox: https://cooking.lady.mail.ru/%5cblackfan.ru HTTP Response http HTTP/1.1 301 Moved Permanently ... Location: / /blackfan.ru/ http HTTP/1.1 301 Moved Permanently ... Location: /\blackfan.ru/...
Chrome HTTP 1xx Out Of Bounds Read
Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the 35th entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161219001.html. There you can find a repro that triggered this...
McAfee VirusScan Enterprise CRLF Injection Vulnerability
McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A CRLF injection vulnerability exists in VirusScan Enterprise for Lin...
McAfee Virus Scan Enterprise For Linux Remote Code Execution
Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...
McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10181)
The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the web interface due to improper error reporting. An authenticated,...
McAfee Virus Scan Enterprise for Linux - Remote Code Execution Exploit
Exploit for linux platform in category remote exploits ''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens...
McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution
''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...
McAfee VirusScan for Linux contains multiple vulnerabilities
Overview McAfee VirusScan for Linux contains multiple vulnerabilities. Description McAfee VirusScan for Linux version 2.0.3 and prior is vulnerable to the following:CWE-200: Information Exposure - CVE-2016-8016 Multiple pages within the web interface utilize a tplt parameter. An authenticated...
Updated tomcat package fixes security vulnerabilities
The code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could...
Cisco Firepower Management Center Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...
Cisco Firepower Management Center Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...
squid security update
CentOS Errata and Security Advisory CESA-2016:2600 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 403 Forbidden (ZDM-certsrv/1.0 - 403 16)
XenMobile Client Certificate request responded with a HTTP Response 403 16 Forbidden by the issuing server IIS Log : 2016-10-11 14:42:18 10.1.1.51 POST /certsrv/certfnsh.asp - 443 - 192.168.100.100 ZDM-certsrv/1.0 - 403 16 2148204809 31...
Mail.ru: [qpt.mail.ru] CRLF Injection / Open Redirect
Уязвимый сценарий: /tests/ Уязвимый параметр: qptquestionurl Пример Open Redirect:...
Microsoft WININET.dll - CHttpHeaderParser::ParseStatusLine Out-of-Bounds Read (MS16-104MS16-105)
Microsoft WININET.dll - CHttpHeaderParser::ParseStatusLine Out-of-Bounds Read MS16-104MS16-105 !-- Source: http://blog.skylined.nl/20161110001.html Synopsis A specially crafted HTTP response can cause the CHttpHeaderParser::ParseStatusLine method in WININET to read data beyond the end of ...
RHEL 7 : squid (RHSA-2016:2600)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2600 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The following packages have...
Moderate: Red Hat Security Advisory: squid security, bug fix, and enhancement update
An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net
Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...
Mail.ru: [pokerist.mail.ru] XSS Request-URI
PoC FireFox: https://pokerist.mail.ru/%3Cscript%3Ealertdocument.domain%3C/script%3E https://pokerist.mail.ru/%3Csvg%20onload=alertdocument.domain%3E HTTP Response: html Error 404 Unable to resolve the request "alertdocument.domain". html Error 404 The system is unable to find the requested action...