54 matches found
WAFW00F v1.0.0 - Detect All The Web Application Firewall!
WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...
Nginx Web Application Firewall: NAXSI
NAXSI means Nginx Anti XSS & SQL Injection . Technically, it is a third party nginx module, available as a package for many UNIX-like platforms. This module, by default, reads a small subset of simple and readable rules containing 99% of known patterns involved in website vulnerabilities. For...
Report OWASP WAF Naxsi bypass Vulnerability
OWASP WAF Naxsi bypass Vulnerability Certain unspecified input is not properly handed in naxsisrc/naxsiutils.c naxsiunescapeuriuchar dst, uchar src, sizet size, ngxuintt type before being used to filtered. This can be exploited to bypass some WAF rules. Naxsi site https://code.google.com/p/naxsi/...
OWASP WAF Naxsi Bypass
OWASP WAF Naxsi bypass Vulnerability Certain unspecified input is not properly handed in naxsisrc/naxsiutils.c naxsiunescapeuriuchar dst, uchar src, sizet size, ngxuintt type before being used to filtered. This can be exploited to bypass some WAF rules. Naxsi site https://code.google.com/p/naxsi/...
DEBIAN-CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...
CVE-2012-3380
CVE-2012-3380 concerns the Naxsi module for Nginx, specifically in naxsi-ui/nx_extract.py, with a directory traversal vulnerability in versions prior to 0.46-1 that could let local users read arbitrary files via unspecified vectors. The linked sources consistently describe this issue as a local a...
PT-2012-4675 · Nginx · Nginx +1
Name of the Vulnerable Software and Affected Versions: Naxsi module versions prior to 0.46-1 for Nginx Description: A directory traversal issue exists, allowing local users to read arbitrary files. Recommendations: For Naxsi module versions prior to 0.46-1, update to version 0.46-1 or later to...
