Nginx < 1.11.1 NULL Pointer Dereference

According to the self-reported version in its response header, the version of nginx hosted on the remote web server is 1.11.1. It is, therefore, affected by an NULL pointer dereference vulnerability Note that the scanner has not tested for these issues but has instead relied only on the...

Nginx < 1.7.4 SMTP STARTTLS Command Injection

According to the self-reported version in the server response header, the version of nginx installed on the remote host is 1.5.6 or higher, 1.6.x prior to 1.6.1, or 1.7.x prior to 1.7.4. It is, therefore, affected by a command injection vulnerability. A flaw exists in the function...

Nginx < 1.10.1 NULL Pointer Dereference

According to the self-reported version in its response header, the version of nginx hosted on the remote web server is 1.11.1. It is, therefore, affected by an NULL pointer dereference vulnerability Note that the scanner has not tested for these issues but has instead relied only on the...

Nginx < 1.13.3 Integer Overflow

According to the self-reported version in its response header, the version of nginx hosted on the remote web server is 1.13.3. It is, therefore, affected by an integer overflow vulnerability Note that the scanner has not tested for these issues but has instead relied only on the application's...

Nginx < 1.12.1 Integer Overflow

According to the self-reported version in its response header, the version of nginx hosted on the remote web server is 1.13.3. It is, therefore, affected by an integer overflow vulnerability Note that the scanner has not tested for these issues but has instead relied only on the application's...

nginx Data Disclosure Vulnerability

The installed version of nginx is prior to 1.12.1 or 1.13.x prior to 1.13.3. It is, therefore, affected by an integer overflow vulnerability in the range filter module. An unauthenticated, remote attacker can exploit this, via a specially crafted request to disclose potentially sensitive...

nginx < 1.10.1 / 1.11.x < 1.11.1 Denial-of-Service Vulnerability

The version of nginx hosted on the remote web server is less than 1.10.1, or 1.11.x less than 1.11.1. It is, therefore, affected by a denial of service vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P01 TI x-stream Codename: TIIP2 V1.05.P01 ThermiC...

Wallarm Kubernetes Ingress Controller

Kubernetes is a popular technology which aims to improve how containers, microservices and other distributed components are managed across varied infrastructure. Since it was first announced by Google in 2014, it has grown in adoption and is now one of the leading system for automated deployment...

Nginx Default Index Page

The scanner has detected Nginx default index pages on the remote web server. This could potentially leak useful information about the server installation to a remote, unauthenticated attacker. No source data...

ZZCMS SQL Injection Vulnerability (CNVD-2018-15848)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in line 5 of the zt/top.php file in ZZCMS 8.3 and earlier versions. A remote attacker can exploit this vulnerability by running ZZCMS in nginx to execute arbitrary SQL...

CVE-2018-1000653

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

CVE-2018-1000653

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

Sql injection

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...

Photon OS 1.0: Binutils / C / Dnsmasq / Git / Gnutls / Krb5 / Linux / Mercurial / Mesos / Nginx PHSA-2017-0038 (deprecated)

An update of gnutls, c-ares, nginx, mercurial, linux, mesos, git, binutils, krb5, dnsmasq packages for PhotonOS has been released. File data PhotonOSPHSA-2017-0038.nasl...

Photon OS 1.0: Dnsmasq / Grub2 / Haproxy / Linux / Nginx / Vim / Wget / Zookeeper PHSA-2016-0012 (deprecated)

An update of linux , wget , vim , grub2 , zookeeper , nginx , dnsmasq , haproxy packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory...

vulhub

This is a Docker Compose file for a vulnerability environment. It is a collection of services and their configurations that can be used to test and demonstrate various vulnerabilities. The file is written in YAML format and defines the services, their ports, and their dependencies. The services...

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

This repository is an offensive tool for a vulnerability environment. It is a collection of Docker Compose files for various vulnerabilities, allowing users to easily set up and test vulnerable environments. The repository includes files for vulnerabilities such as CVE-2016-9086, CVE-2017-1000353...

Zero-Day Coverage Update – Week of July 23, 2018

We’re at the end of July and the Zero Day Initiative ZDI has published 873 advisories so far. That’s 273 advisories this month alone – and that’s just the tip of the iceberg! Earlier this week, ZDI announced the Targeted Incentive Program, which brings over $1,500,000 USD in special bounty awards...

SUSE-SU-2018:2039-1 Security update for rubygem-passenger

This update for rubygem-passenger fixes the following issue: The following security vulnerability was addressed: - CVE-2018-12029: Fixed a file system access race condition in the chown command, which allowed for local privilege escalation and affects the Nginx module bsc1097663...