116 matches found
CVE-2021-29416
CVE-2021-29416 affects PortSwigger Burp Suite prior to 2021.2. During viewing of a malicious request, Burp Suite can be manipulated to issue a request that ignores its upstream proxy configuration, potentially leaking NetNTLM hashes on Windows systems that do not block outbound SMB. The issue is ...
CVE-2021-29416
An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...
PortSwigger Burp Suite 安全漏洞
PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. A security vulnerability exists in PortSwigger Burp Suite that stems from an inability to block NetNTLM hashes on Windows systems with outbound SMB...
Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing
Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...
PortSwigger Web Security: HTML Injection in Swing can disclose netNTLM hash or cause DoS
The vulnerability is like a SSRF but on the client side, where an attacker can force an unsolicited hidden request made by Burp Suite when the victim performs some actions. During normal browsing to a website through Burp Suite Pro or Community, if the website makes a request with HTML code in a...
PortSwigger Web Security: SMTP interaction theft via MITM
See http://www.postfix.org/CVE-2011-0411.html for adetailled description. Impact MitM could obtain user credentials...
Microsoft Skype For Business DNS Query
I. VULNERABILITY ------------------------- Microsoft Skype for Business External Service Interaction DNS Latest Version II. CVE REFERENCE ------------------------- Not Assigned Yet III. VENDOR ------------------------- https://www.microsoft.com IV. TIMELINE ------------------------- 28/11/2019...
OWOX, Inc.: Reflected XSS
Hi team, I have found an XSS at https://bi.owox.com/ui/6177527534dc114eb07fa829e4ce4d28/dashboard/?trial=activated Because the input is not properly filtered, resulting in XSS being executed Vulnerable area: ----- 6177527534dc114eb07fa829e4ce4d28 The URL will now be:...
PortSwigger Web Security: Clicking "http://burp" hyperlink on FireFox CA Installation guide redirects to "burp.com" (unclaimed website).
Executive Summary --------------------------------------------------- I was in the process of installing Burp suite community edition on my recent machine where I believe I stumbled across a potential open redirect issue on the CA certificate installation website. This is a security concern due t...
Lob: HTTP Request Smuggling on vpn.lob.com
Hi , vpn.lob.com is vulnerable to CL TE Front end server uses Content-Length , Back-end Server uses Transfer-encoding HTTP request smuggling attack. Steps to reproduce 1. Run the burp suite turbo intruder on the following request POST /auth/session HTTP/1.1 Host: vpn.lob.com User-Agent: Mozilla/5...
Internet Bug Bounty: Industry-Wide MITM Vulnerability Impacting the JVM Ecosystem
I've been exploring the industry-wide scope of the use of HTTP to resolve dependencies in build infrastructure across the industry. What I unearthed was that some of the most popular libraries and two compilers were impacted by this vulnerability. Vulnerability CWE-829: Inclusion of Functionality...
Vulners Scanner for Android - Passive Vulnerability Scanning Based On Software Version Fingerprint
Vulners Scanner is developed by Vulners Team, the founders and maintainers of one of the world largest security databases. It implements technology of passive vulnerability scanning based on software version fingerprint. Is it legal? Absolutely. The application does not perform any malicious...
PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer
I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...
PortSwigger Web Security: Build fetches jars over HTTP
CWE-829: Inclusion of Functionality from Untrusted Control Sphere CWE-494: Download of Code Without Integrity Check PortSwigger maintains several Open Source Projects under the PortSwigger GitHub organization. Some of these projects contain build files that indicate that some of these projects ar...
PortSwigger Web Security: Browser Self XSS Protection not implemented
Hi Self XSS Protection not used ,An attacker can trick users to insert JavaScript in browser console. A Self-XSS scam usually works by promising to help you access somebody else's account. Instead, the scammer tricks you into gaining access to your account for fraud, spam and tricking more people...
Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Linux
Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PortSwigger Burp Suite Man-in-the-Middle Attack Vulnerability
PortSwigger Burp Suite is a web application vulnerability scanning software from PortSwigger UK. A security vulnerability exists in PortSwigger Burp Suite versions prior to 1.7.34, which stems from the program failing to properly detect Collaborator server certificates. An attacker can exploit th...
Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Mac OS X
Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Input validation
PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data...
