4240 matches found
CVE-2012-2566
CVE-2012-2566 concerns Bloxx Web Filtering prior to 5.0.14. The issue is that the product does not correctly interpret the X-Forwarded-For header during HTTPS access-control and logging, which can allow an unauthenticated user to bypass IP/domain restrictions and produce misleading logs. The entr...
The Pirate Bay готов к вечной смене IP-адресов
The Pirate Bay — самый опасный сайт в интернете, судя по количеству стран, где запрещён к нему доступ. Провайдеры по всему миру получают копии судебных постановлений с указанием заблокировать IP-адрес гонимого ресурса и десятки прокси. На прошлой неделе The Pirate Bay среагировал на блокаду и...
Skype IP Address Vulnerability May Not Be So New
A vulnerability in Skype that could expose members’ IP addresses may have been known to Skype officials as far back as November 2010. A researcher who first discovered the flaw speculates it may have been left exposed perhaps because it was deeply embedded in the code and could cause other...
Design/Logic Flaw
Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inboundproxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication...
Seditio 165 SQL Injection / Denial Of Service
cs Seditio 165 from seditio-eklenti.com Denial Of Service exploit by AkaStep. We will exploit Sql injection using this exploit and as result we will cause Denial of Service. Mysql server will go down or will overloaded +server will get overloadedHigh CPU Load. // Vuln Discovered By AkaStep +...
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author :...
Debian: Security Advisory (DSA-2421-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DDOS attack on LIME's Internet system
DDOS attack on LIME's Internet system LIME says the majority of the customers experiencing degradation in their broadband services over the past few days are now back online and connecting at normal speeds. LIME says the type of attack is known in technology circles as a distributed denial of...
Debian DSA-2421-1 : moodle - several vulnerabilities
Several security issues have been fixed in Moodle, a course management system for online learning : - CVE-2011-4308 / CVE-2012-0792 Rossiani Wijaya discovered an information leak in mod/forum/user.php. - CVE-2011-4584 MNet authentication didn't prevent a user using 'Login as' from jumping to a...
[SECURITY] [DSA 2421-1] moodle security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2421-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 29, 2012 http://www.debian.org/security/faq -...
Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability
The host is running Microsoft IIS Webserver and is prone to IP address disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiisinternalipaddrdiscvuln.nasl 5698 2017-03-23 14:04:51Z cfi $ Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability Authors: Madhuri D...
Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability - Active Check
Microsoft Internet Information Services IIS Webserver is prone to an IP address disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password)
Cisco Linksys WAG54GS - Cross-Site Request Forgery Change Admin Password +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012...
Cisco Linksys WAG54GS CSRF Change Admin Password
Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012 Author : Ivano...
The Syrian spyware to target the opposition activists
The Syrian spyware to target the opposition activists CNN News reported about malicious programs used to target the Syrian opposition, Its a computer viruses that spy on them and according to report a Syrian opposition group and a former international aid worker whose computer was infected. They...
openssl: malformed RFC 3779 data can cause assertion failures
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service assertion failure via an X.509 certificate containing certificate-extension data associated with 1 IP address blocks or 2 Autonomous System AS identifiers...
BASE 1.4.5 (base_qry_main.php t_view) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: BASE 1.4.5 SQL Injection Vulnerability Date: 30/01/2012 Author: a.kadir altan testpenterATgmail.com Software Link: http://base.secureideas.net Version: 1.4.5 Platform: PHP BASE Snort Analysis Front-end SQLi Vulnerability...
BASE 1.4.5 - 'base_qry_main.php?t_view' SQL Injection
Exploit Title: BASE 1.4.5 SQL Injection Vulnerability Date: 30/01/2012 Author: a.kadir altan testpenterATgmail.com Software Link: http://base.secureideas.net Version: 1.4.5 Platform: PHP BASE Snort Analysis Front-end SQLi Vulnerability Vulnerable parameters: ipaddr01 ipaddr02 ipaddr09 Vulnerable...
Design/Logic Flaw
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by readin...