CVE-2010-4211

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate...

DEBIAN-CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

Design/Logic Flaw

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

PT-2010-3305 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7f Description: The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. The vulnerable parameters include hostname and description in host.php, as well...

rekonq 'Error Page' Cross-Site Scripting Vulnerabilities

This host is installed with rekonq and is prone to cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbrekonqmultxssvuln.nasl 4919 2017-01-02 15:22:45Z cfi $ rekonq 'Error Page' Cross-Site Scripting Vulnerabilities. Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

Apache Tomcat 6.0 < 6.0.28 Multiple Vulnerabilities

According to its self-reported version number, the instance of Apache Tomcat 6.0 listening on the remote host is prior to 6.0.28. It is, therefore, affected by multiple vulnerabilities: - If a web app is configured to use BASIC or DIGEST authentication and the 'realm-name' attribute is not...

tomcat: information disclosure in authentication headers

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires 1 BASIC or 2 DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the rep...

CVE-2010-2903

Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors...

CVE-2010-2903

Removed by vendor...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...

Apache Tomcat 6.0.18 - utf8 Directory Traversal

Apache Tomcat 6.0.18 - utf8 Directory Traversal /Apache Tomcat include include include include include include include include include include define EXPLOIT "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.0\n\n" define RCVBUFSIZE 9999 define tester "root:x" void cls char esc = 27;...

Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal

/Apache Tomcat include include include include include include include include include include define EXPLOIT "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.0\n\n" define RCVBUFSIZE 9999 define tester "root:x" void cls char esc = 27; printf"%c%s",esc,"2J"; printf"%c%s",esc,"1;1H";...

Google Chrome < 5.0.375.125 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 5.0.375.125. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified error in the layout code allows memory contents to be disclosed. Issue 42736 - An unspecified error exists in the handling of...

Blind SQL Injection Dumper

Blind SQL Injection Dumper v1.1 Win32 Console По мотивам https://forum.antichat.ru/showpost.php?p=1494443&postcount=11 Описание 1. Возникает сложность при использовании большой и сложной конструкции запроса, особенно при переборе с использованием LIMIT. Утилита с ключом -q позволяет...

HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution

Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1555 Code : !/usr/bin/python import struct import socket import httplib import urllib eh =...

HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Code Execution

Exploit for windows platform in category remote exploits ================================================================== HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Code Execution ================================================================== Exploit Title: HP OpenView NNM...

HP OpenView Network Node Manager (OV NNM) - getnnmdata.exe CGI Invalid Hostname Remote Code Execution

HP OpenView Network Node Manager OV NNM - getnnmdata.exe CGI Invalid Hostname Remote Code Execution Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE:...