999 matches found
ModSecurity For Nginx Use-After-Free
Hey, TL;DR: UAF in a "non-release" version of ModSecurity for Nginx. !RCE|DoS, no need to panic. Plus some old and even older exploitation vectors. / 1. Use-After-Free UAF / During one of the engagements my team tested a WAF running in production Nginx + ModSecurity + OWASP Core Rule Set 123. In...
ModSecurity WAF 3.0 for Nginx - Denial of Service
Use-After-Free UAF During one of the engagements my team tested a WAF running in production Nginx + ModSecurity + OWASP Core Rule Set 123. In the system logs I found information about the Nginx worker processes being terminated due to memory corruption errors. Through fuzzing and stress testing...
Akamai Is Named A Leader In Gartner's Magic Quadrant For Web Application Firewalls
"Don't work for recognition, but do work worthy of recognition" - H. Jackson Brown. A friend sent this quote to me after I explained to her my ambivalence about being recognized by Gartner as a "Leader" in their Web Application Firewall Magic Quadrant. I had mixed feelings because I wanted to...
SpiderLabs OWASP ModSecurity Core Rule Set Remote Code Execution Vulnerability
SpiderLabs OWASP ModSecurity is a web application firewall engine.Core Rule Set CRS is one of the core rule sets. A security vulnerability exists in the SpiderLabs OWASP ModSecurity CRS that allows remote attackers to submit a special request and execute arbitrary code...
Identify Web Application Firewall: WAFW00F
WAFW00F Fingerprints and Identify Web Application Firewall WAF products WAFW00F is a Python tool to help you fingerprint and identify Web Application Firewall WAF products. It is an active reconnaissance tool as it actually connects to the web server, but it starts out with a normal HTTP response...
WAFW00F - Identifies and Fingerprints Web Application Firewall (WAF) Products
WAFW00F allows one to identify and fingerprint Web Application Firewall WAF products protecting a website. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions If that is not successful, it...
JShielder - LAMP/LEMP Secure Deployment
JSHielder is an Open Source tool developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application. This tool automates the process of installing all the necessary packages to host a web application and Hardening a Linux server with little...
ModSecurity Block Detection
Binary data 9008.prm...
WordPress4. 0 and the following version of the Dos attack Vulnerability CVE-2 0 1 4-9 0 3 4 the detection and use-vulnerability and early warning-the black bar safety net
In this article, I will detail how to use vulnerability POC（proof-of-concept tool Searchspoit on your Wordpress website, 4.0 and following versions of Dos attack Vulnerability CVE-2 0 1 4-9 0 3 4 the detection and utilization. Vulnerability description CVE-2 0 1 4-9 0 3 4 is due to the hash numbe...
Oracle Solaris Third-Party Patch Update : modsecurity (cve_2012_2751_improper_input)
The remote Solaris system is missing necessary patches to address security updates : - ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data...
WAF-FLE v0.6.4 - OpenSource ModSecurity Console
WAF-FLE is a OpenSource ModSecurity Console, allows modsecurity admin to store, view and search events sent by sensors using a graphical dashboard to drill-down and find quickly the most relevant events. It is designed to be fast and flexible, while keeping a powerful and easy to use filter, with...
Debian DSA-2991-1 : modsecurity-apache - security update
Martin Holst Swende discovered a flaw in the way chunked requests are handled in ModSecurity, an Apache module whose purpose is to tighten the Web application security. A remote attacker could use this flaw to bypass intended modsecurity restrictions by using chunked transfer coding with a...
[SECURITY] [DSA 2991-1] modsecurity-apache security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2991-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2991-1] modsecurity-apache security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2991-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...
DSA-2991-1 modsecurity-apache - security update
Bulletin has no description...
Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)
Martin Holst Swende discovered a flaw in the way chunked requests are handled in ModSecurity, an Apache module whose purpose is to tighten the Web application security. A remote attacker could use this flaw to bypass intended modsecurity restrictions by using chunked transfer coding with a...
Debian: Security Advisory (DSA-2991-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ModSecurity < 2.5.9 - Remote Denial of Service Vulnerability
No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...
ModSecurity <= 2.5.9 (Core Rules <= 2.5-1.6.1) Filter Bypass Vuln
No description provided by source. ======================================================================== ModSecurity Core Rules HPP Filter Bypass Vulnerability ======================================================================== Affected Software : ModSecurity = 2.5.9 using ModSecurity Cor...
ModSecurity Remote Null Pointer Dereference
No description provided by source. Source: http://packetstormsecurity.com/files/121815/modsecuritycve20132765check.py.txt When ModSecurity receives a request body with a size bigger than the value set by the SecRequestBodyInMemoryLimit and with a Content-Type that has no request body processor...