CVE-2016-6311

Get requests in JBoss Enterprise Application Platform EAP 7 disclose internal IP addresses to remote attackers...

Design/Logic Flaw

Get requests in JBoss Enterprise Application Platform EAP 7 disclose internal IP addresses to remote attackers...

XenMobile: What IP address has to be assigned to MAM LB?

XenMobile: MAM LB Configuration Looks like to this day the confusion still exist as to what IP Address has to be assigned to MAM LB on NetScaler which communicates with XenMobile Server. Whether this IP Address should be Internal or External? And what standard has to be followed is the objective ...

Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file

Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...

Boozt Fashion AB: PHP info page disclosure on http://www.day.dk/

Hi, Boozt team. Description: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step to reproduce: 1. Go to http://www.day.dk/check.php An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...

CVE-2016-3711

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFTnamespaceSERVERID" cookie...

CVE-2016-3711

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFTnamespaceSERVERID" cookie...

Red Hat OpenShift Enterprise HAProxy Information Disclosure Vulnerability

Red Hat OpenShift is a platform-as-a-service cloud computing platform that builds, tests, deploys, and runs applications.HAProxy is an open source TCP/HTTP load balancing server. An information disclosure vulnerability exists in HAProxy used by Red Hat OpenShift Enterprise, allowing remote...

Xero: Default.aspx exposing full path and other info on wip.origin-community.xero.com

A Web server Configuration error was reported, which displayed a default installation file with an internal IP address. This was rated low-risk and was fixed in days...

Tridium NiagaraAX Fox Channel Protocol Information Disclosure Vulnerability

TRIDIUM NiagaraAX is a software framework and development environment. A security vulnerability in the TRIDIUM NiagaraAX fox channel protocol allows remote attackers to exploit the vulnerability to gain access to the protocol version, internal IP address, Niagara-AX application, and more...

Outlook Web App (OWA) / Client Access Server (CAS) IIS HTTP Internal IP Disclosure

This module tests vulnerable IIS HTTP header file paths on Microsoft Exchange OWA 2003 and CAS 2007, 2010, and 2013 servers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Outlook Web App OWA ...

Coinbase: Blacklist bypass on Callback URLs

In bug 47368, I was able to reach private IP addresses via the "Test Now" button of the "Callback URL" feature. Exploiting this flaw allowed me to reach the metadata server of your outbound proxy which is, afaik, maintained by Proximo. A comment by aianus states that callbacks are now restricted...

Microsoft Exchange IIS HTTP Internal IP Address Disclosure

No description provided by source. Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange CAS 2007/2010/2013 Tested on: Exchan...

Framework: Information disclosure via SSRF

It was found that the Spring Framework did not, by default, disable the resolution of URI references in a DTD declaration when processing user-provided XML documents. By observing differences in response times, an attacker could identify valid IP addresses on the internal network with functioning...

Outlook Web App (OWA) / Client Access Server (CAS) IIS HTTP Internal IP Disclosure

Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange CAS 2007/2010/2013 Tested on: Exchange OWA 2003, Exchange CAS...

Microsoft Exchange - IIS HTTP Internal IP Address Disclosure (Metasploit)

Microsoft Exchange - IIS HTTP Internal IP Address Disclosure Metasploit Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange...

Microsoft Exchange IIS HTTP Internal IP Address Disclosure

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange CAS...

Microsoft Exchange - IIS HTTP Internal IP Address Disclosure (Metasploit)

Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange CAS 2007/2010/2013 Tested on: Exchange OWA 2003, Exchange CAS...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

No description provided by source...

SafeTP 1.46 Passive Mode Internal IP Address Revealing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5822/info SafeTP is a freely available, open source secure ftp client-server software package. It is available for Unix, Linux, and Microsoft Operating Systems. It has been reported that under some circumstances, the Safe...