4241 matches found
CVE-2016-2516
NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...
Design/Logic Flaw
NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...
X (Formerly Twitter): Attacker can get vine repost user all informations even Ip address and location .
The researcher discovered that an endpoint used for providing information about Vine reposts was unintentionally disclosing the IP address the repost was made from. Upon receiving this report we immediately took steps to correct the issue and updated the misconfigured endpoint the same day the...
Server side request forgery (ssrf)
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
CVE-2017-5518
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
CVE-2017-5518
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file
Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...
New Relic: Restricted User can view multiple account details including customer_root_account_id, payment method, date of first payment, etc.
Summary When a restricted user visits this URL: There is a request sent to this URL: https://www.staging-bam.nr-data.net. Within that request leaks the following information about the entire account, that the restricted user can view:...
Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager
Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center 2012 R2 Virtual Machine Manager. This update rollup contains two updates for System...
UBUNTU-CVE-2016-10196
Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service segmentation fault via vectors involving a long string in brackets in the ipasstring argument...
ntop-ng 2.5.160805 Username Enumeration
Exploit title: ntopng user enumeration Author: Dolev Farhi Contact: dolevf at protonmail.com Date: 04-08-2016 Vendor homepage: ntop.org Software version: v.2.5.160805 !/usr/env/python import os import sys import urllib import urllib2 import cookielib server = 'ip.add.re.ss' username = 'ntopng-use...
VMPanel 2.7.4 - SQL Injection Web Vulnerability
Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...
VMPanel 2.7.4 SQL Injection
===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...
VMPanel 2.7.4 - SQL Injection Web Vulnerability
Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...
XFINITY Gateway Technicolor DPC3941T Cross Site Request Forgery
Exploit Title: CSRF XFINITY Gateway product Technicolorpreviously Cisco DPC3941T Date: 12/12/2016 Exploit Author: Ayushman Dutta Version: dpc3941-P20-18-v303r20421733-160413a-CMCST CVE : CVE-2016-7454 The Device DPC3941T is vulnerable to CSRF and has no security on the entire admin panel for it...
Turkish Hackers Are Giving Away Prizes For Participating In DDoS Attacks
DDoS has become a game now that could knock any service offline. A Turkish hacking group is encouraging individuals to join its DDoS-for-Points platform that features points and prizes for carrying out distributed denial-of-service DDoS attacks against a list of predetermined targets. The points...
TP-LINK TD-W8951ND - Denial of Service
Exploit Title: TP-LINK TD-W8951ND - Denial of Service Date: 2016-12-07 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Demo Construction : https://youtu.be/7mvrW3mtVE !/usr/bin/python import urllib site=rawinput"Enter IP Address : " if...
Mozilla Patches Firefox Zero Day Used to Unmask Tor Browser Users
As expected, Mozilla released a new version of Firefox on Wednesday to address a zero-day vulnerability that was actively being exploited to de-anonymize Tor Browser users. The vulnerability, disclosed on a public Tor Project mailing list late Tuesday night, forced the Tor Project to also issue a...
CVE-2016-9752
In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address e.g., http://127.1 or a 30x aka Redirection HTTP status code...
Server side request forgery (ssrf)
In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address e.g., http://127.1 or a 30x aka Redirection HTTP status code...