Lucene search
+L

288 matches found

UbuntuCve
UbuntuCve
•added 2016/07/18 2:00 p.m.•61 views

CVE-2016-5388

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

8.1CVSS6.9AI score0.50896EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2016/07/18 2:00 p.m.•35 views

CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...

8.1CVSS6.9AI score0.50427EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/07/18 2:00 p.m.•37 views

CVE-2016-5386

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI...

8.1CVSS6.9AI score0.0522EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/06/30 11:00 p.m.•40 views

CVE-2016-5306

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445...

5.5AI score0.02076EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
•added 2016/04/03 12:00 a.m.•4 views

SwitchBlade Denial of Service Tool

SwitchBlade is a DDoS tool that attacks Web servers with vast amounts of HTTP traffic using random parameters. A successful attack can cause a web server to terminate, leading to a denial-of-service condition...

2.2AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2016/03/30 12:00 a.m.•5 views

SadAttack Denial of Service Tool

SadAttack is a DDoS tool that attacks Web servers with vast amounts of HTTP traffic using random parameters. A successful attack can cause a web server to terminate, leading to a denial-of-service condition...

2.6AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2016/03/10 2:18 p.m.•31 views

Samsung Windows Laptop Owners Urged To Download Fix To MitM Vulnerability

Samsung laptop owners are being urged to update their Windows PCs after the discovery of a vulnerability that can allow remote attackers to download files onto a targeted system and gain complete control over the laptop. The flaw is tied to a feature called “Samsung SW Update Tool 2.2.5.16”...

0.4AI score
SaveExploits0References4
Prion
Prion
•added 2015/11/18 9:59 p.m.•31 views

Server side request forgery (ssrf)

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

4.3CVSS7AI score0.04482EPSS
SaveExploits1References9Affected Software2
NVD
NVD
•added 2015/11/18 9:59 p.m.•38 views

CVE-2015-5255

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

4.3CVSS3.9AI score0.04482EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2015/11/18 9:00 p.m.•49 views

CVE-2015-5255

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

3.8AI score0.04482EPSS
SaveExploits1References9
ThreatPost
ThreatPost
•added 2015/09/21 1:00 p.m.•20 views

XcodeGhost iOS App Malware Contained

Concern over the so-called XcodeGhost malware has put the security of Apple’s App Store on the front page. While the App Store was not hacked, attackers did manage to append malicious code to a number of popular apps—most of those developed in China—and find a loophole in Apple’s code-scanning to...

7.2AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2015/07/07 12:00 a.m.•21 views

Rockwell Automation MicroLogix 1100 PLC < Series B FRN 12.0 MitM Replay Authentication Bypass

Binary data scadarockwellmicrologix1100plcmitm470156.nbin...

9.3CVSS7.3AI score0.0926EPSS
SaveExploits0References3
n0where
n0where
•added 2015/07/02 10:56 a.m.•55 views

Stealthy PHP Web Shell Backdoor: Weevely

Stealthy PHP Web Shell Backdoor Weevely is a command line web shell dinamically extended over the network at runtime used for administration and pen testing of remote web accesses. It provides a weaponized telnet-like console through a PHP script running on the target, even in restricted...

0.1AI score
SaveExploits0References8
Prion
Prion
•added 2015/06/10 1:59 a.m.•30 views

Server side request forgery (ssrf)

The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery SSRF issue, aka "Exchange Server-Side Request Forger...

4.3CVSS7AI score0.13467EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
•added 2015/05/12 9:49 a.m.•10 views

Datapp Sniffs Out Unencrypted Mobile Data

Last fall, researchers at the University of New Haven’s Cyber Forensics Research and Education Group dropped the hammer on a number of Android apps, including those from some popular social networking and dating sites, for their insistence on sending data in the clear. Pretty quickly, the UNHcFRE...

SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2015/04/08 11:04 a.m.•57 views

Security update for MozillaFirefox, MozillaThunderbird, mozilla-nspr (important)

Mozilla Firefox and Thunderbird were updated to fix several important vulnerabilities. Mozilla Firefox was updated to 37.0.1. Mozilla Thunderbird was updated to 31.6.0. mozilla-nspr was updated to 4.10.8 as a dependency. The following vulnerabilities were fixed in Mozilla Firefox: Miscellaneous...

7.5CVSS0.1AI score0.67268EPSS
SaveExploits4References13
ThreatPost
ThreatPost
•added 2015/03/27 11:54 a.m.•13 views

GitHub Hit With DDoS Attack

A large-scale DDoS attack, apparently emanating from China, has been hammering the servers at GitHub over the course of the last 12 hours, periodically causing service outages at the code-sharing and collaboration site. The attack appears to have begun around 2 AM UTC on Friday and has been going...

7.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2015/01/26 6:59 p.m.•27 views

CapTipper - Malicious HTTP traffic explorer tool

CapTipper is a python tool to analyze, explore and revive HTTP malicious traffic. CapTipper sets up a web server that acts exactly as the server in the PCAP file, and contains internal tools, with a powerful interactive console, for analysis and inspection of the hosts, objects and conversations...

7.7AI score
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

PragmaMX 1.2.10 Persistent XSS Vulnerability

No description provided by source. TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12....

7.1AI score
SaveExploits0
NVD
NVD
•added 2014/04/19 7:55 p.m.•25 views

CVE-2014-2731

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

9.3CVSS7.8AI score0.04243EPSS
SaveExploits1References2
Rows per page
Query Builder