6031 matches found
PT-2016-4587 · Openssl · Rust-Openssl
Name of the Vulnerable Software and Affected Versions: rust-openssl versions prior to 0.9.0 Description: The issue is related to SSL/TLS man-in-the-middle attacks due to insecure defaults in the openssl crate for Rust. Specifically, certificate verification is off by default, and there is no API...
SUSE SLES11 Security Update : bind (SUSE-SU-2016:2706-1)
This update for bind fixes the following issues : - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. - Fix BIND to return a valid...
SUSE-SU-2016:2706-1 Security update for bind
This update for bind fixes the following issues: - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. - Fix BIND to return a valid...
SUSE-SU-2016:2697-2 Security update for bind
This update for bind fixes the following issues: - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. - Fix BIND to return a valid...
CURL-CVE-2016-8625 IDNA 2003 makes curl use wrong host
When curl is built with libidn to handle International Domain Names IDNA, it translates them to puny code for DNS resolving using the IDNA 2003 standard, while IDNA 2008 is the modern and up-to-date IDNA standard. This misalignment causes problems with for example domains using the German ß...
CVE-2016-7965
DokuWiki 2016-06-26a and older uses $SERVERHTTPHOST instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. A remote unauthenticated attacker can change the URL's hostname via the HTTP Host header. The vulnerability can be triggered only if the Host...
Informatica: [afocusp.informatica.com] Sql injection afocusp.informatica.com:37777
hi !There is another sql injection on host afocusp.informatica.com:37777 POC version http://afocusp.informatica.com:37777/pls/apex/f?;OWAUTIL.CELLSPRINT:1;--=select++from+v$version hostname of the database server psvlxtdapp1.inf...
uSQLite 1.0.0 Denial Of Service
!/usr/bin/python Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC Date: 27/10/1016 Exploit Author: Peter Baris Software Link: https://sourceforge.net/projects/usqlite/?source=directory Version: 1.0.0 Tested on: windows 7 and XP SP3 Longer strings will cause heap based...
Hostname Detection via mDNS
Binary data 7234.pasl...
Network Scanner 4.0.0.0 SEH Overflow
!/usr/bin/python -- coding: utf-8 -- Network Scanner Version 4.0.0.0 - SEH Overflow Exploit by n30m1nd Date: 2016-10-21 Exploit Author: n30m1nd Exploit Title: Network Scanner Version 4.0.0.0 SEH Based Exploit Vendor Homepage: http://www.mitec.cz/ Software Link:...
StackStorm Hostname Detection
Binary data 7236.pasl...
Puppet Server Hostname Detection
Binary data 7233.pasl...
Dotclear Password Reset Address Forgery Vulnerability
Dotclear is an open source free web publishing software. Dotclear suffers from a password reset address forgery vulnerability that can be exploited by an attacker to forge the hostname of a password reset address...
anonym8 - Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS
Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian, Kali, Parrot to use the graphical interface, you'll need...
Transparent Proxy tunnels: anonym8
Transparent Proxy tunnels Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian Kali Parrot To use the graphica...
ALPINE-CVE-2016-5180
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...
CVE-2016-5180
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...
CVE-2016-5180
CVE-2016-5180 describes a heap-based buffer overflow in c-ares (versions 1.x before 1.12.0) in the ares_create_query function when a hostname with an escaped trailing dot is processed. This can lead to a denial of service or possibly remote code execution. The issue is triggered by incorrect stri...
CVE-2016-5180
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...