358 matches found
GyoiThon - A Growing Penetration Test Tool Using Machine Learning
GyoiThon is a growing penetration test tool using Machine Learning. GyoiThon identifies the software installed on web server OS, Middleware, Framework, CMS, etc... based on the learning data. After that, it executes valid exploits for the identified software using Metasploit. Finally, it generate...
SickRage Information Disclosure Vulnerability
SickRage is an automated video manager for managing and storing TV programs. A security vulnerability exists in versions prior to SickRage v2018.03.09-1, which stems from an HTTP response containing credentials in plaintext form. An attacker could exploit the vulnerability to obtain information...
Hardcoded credentials
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
CVE-2018-9160
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
PYSEC-2018-101
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
CVE-2018-9160
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
CVE-2018-9160
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
CVE-2018-9160: Insufficiently Protected Credentials
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...
USN-3600-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain stream metadata. A remote attacker could possibly use this issue to set arbitrary metadata. This issue only affected Ubuntu 14.04 LTS. CVE-2016-10712 It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker...
Information Disclosure
hadoop-common is vulnerable to information disclosure. The Jetty server version is leaked as a header in HTTP responses. Using this, attackers have a better idea of potential exploits which might work against the server...
CVE-2017-17968
A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response...
GNU Wget fd_read_body Heap Buffer Overflow (CVE-2017-13090)
A heap buffer overflow vulnerability exists in Wget. The vulnerability is due to improper handling of HTTP responses with chunked transfer encoding within the fdreadbody function. A remote, unauthenticated attacker could exploit this vulnerability by enticing a user to make an HTTP request to the...
USN-3464-1: Wget vulnerabilities
Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-13089, CVE-2017-13090 Dawid Golunski...
Clickjacking Attacks
Hive HCatalog Webhcat is vulnerable to clickjacking attacks. The attacks exist due to the lack of the X-Frame-Options header in the HTTP responses sent by the web server...
Code injection
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
Clickjacking Attacks
github.com/sensu/uchiwa is vulnerable to clickjacking attacks. The vulnerability exists due to the lack of X-Frame-Options header in the HTTP responses sent by the web server...
Scientific Linux Security Update : squid on SL7.x x86_64 (20161103)
The following packages have been upgraded to a newer upstream version: squid 3.5.20. Security Fixes : - Incorrect boundary checks were found in the way squid handled headers in HTTP responses, which could lead to an assertion failure. A malicious HTTP server could use this flaw to crash squid usi...