CVE-2013-1915

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity XXE vulnerability...

DEBIAN-CVE-2013-1915

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity XXE vulnerability...

CVE-2013-1915

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity XXE vulnerability...

Design/Logic Flaw

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

CVE-2013-2767

CVE-2013-2767 affects Citrix NetScaler Access Gateway Enterprise Edition (AGEE) and NetScaler AGEE Common Criteria build configurations. The vulnerability allows remote attackers to bypass intranet access restrictions via unknown vectors; vulnerable if running AGEE before 9.3.62.4 (and 10.x up to...

CVE-2013-2767

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

Xxe

Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML external entity declaration in conjunction with an entity reference...

Xxe

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity...

Peruvian Universities SQL Injection

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Exploit Title : Peruvian Universities - MS Access/SQL Injection Vulnerabilities Date : 16-11-2012 Author : Caleb Bucker Independent Security Researcher Contact : https://twitter.com/CalebDrugs Website :...

Dd'Linux - SQL Injection / Cross-Site Scripting Vulnerabilities

Dd'linux provides business solutions and services based on Linux as the main OS.Given the form of licensing which is free software, these solutions do not require the degree of investment in licenses as required by commercial software.Our technical staff has experience since 1996 in the...

Code injection

The modpagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers...

httpd: reverse web proxy vulnerability

The modproxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to...

Intranet Pro Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Bypass Intranet Pro Date: 2012-04-19 Author: Microsoft-Dz Vendor or Software Link: http://www.intranet-pro.com/ Version: All version Category:: webapps Google dork: intext:- Service proposé par Intranet-Pro.com - Tested on: Luni...

Iran replacing Google, Hotmail with its own internal search engines and email services

Iran replacing Google, Hotmail with its own internal search engines and email services Iran has denied the report that it plans to cut itself off from the Internet. In a statement, the ministry said "The report is in no way confirmed by the ministry". It added that it was "completely baseless," a...

Distinct TFTP 3.10 Writable Directory Traversal Execution

This module exploits a directory traversal vulnerability in the TFTP Server component of Distinct Intranet Servers version 3.10 which allows a remote attacker to write arbitrary files to the server file system, resulting in code execution under the context of 'SYSTEM'. This module has been tested...

Apache HTTP Server mod_proxy Reverse Proxy HTTP 0.9 Information Disclosure

The version of Apache HTTP Server running on the remote host has an information disclosure vulnerability. When configured as a reverse proxy, improper use of the RewriteRule and ProxyPassMatch directives could cause the web server to proxy requests to arbitrary hosts. This could allow a remote...

Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities

Document Title: =============== Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=28 Release Date: ============= 2012-01-18 Vulnerability Laboratory ID VL-ID: ==================================== 28...

Mandriva Update for apache MDVSA-2012:003 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2012:003 apache Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Barracuda Control Center 620 Multiple Vulnerabilities

Exploit for jsp platform in category web applications Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Control Center Application of Barracuda Networks Copy...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=32 VL-ID: ===== 32 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Control Cente...