Need ability to limit use of remote API to certain users, or a certain group

The remote API presents opportunities for denial of service attack. For example: RemoveSpace for a space with many pages can take several minutes, and all other users are locked from the wiki until it completes Reading or writing pages too rapidly through the API can impact the responsiveness of...

[Full-disclosure] Medium level security hole in FreeProxy

The FreeProxy HTTP proxy server suffers from a denial of service condition which causes the server to hang. This occurs when an attacker makes a request for the hostname/portnumber combination in use by the server itself. The vendor was notified on the 10th January 2007 and a fix was made availab...

BlueCoat Systems WinProxy Connect请求远程堆溢出漏洞

BlueCoat WinProxy是适用于中小业务的Internet共享代理服务器。 BlueCoat WinProxy在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞控制代理服务器。 如果远程攻击者能够向WinProxy的HTTP代理服务发送超长的HTTP CONNECT请求的话，就会触发堆溢出，导致拒绝服务或执行任意指令。 Blue Coat Systems WebProxy 6.0 r1c Blue Coat Systems WebProxy 6.0 Blue Coat Systems -----------------...

[Full-disclosure] Web 2.0 backdoors made easy with MSIE & XMLHttpRequest

As you probably know, the famous "web 2.0" XMLHttpRequest object allows client-side web scripts to send nearly arbitrary HTTP requests, and then freely analyze and manipulate the returned response, including HTTP headers. This gives an unprecedented level of control over your browser to the autho...

Squid Proxy 2.52.6 - FTP URI Remote Denial of Service

Squid Proxy 2.52.6 - FTP URI Remote Denial of Service source: https://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash...

3APA3A : Using FTP protocol weaknesses

How to exploit bugs in the implementation of the FTP protocol David Sacerdot, in his article on the vulnerability of the FTP protocol and dated as early as April 1996, theoretically the vulnerability of the FTP protocol if it is incorrectly implemented. Two points are interesting in the article,...

Sun Java系统服务器嵌入式HTTP请求处理漏洞

Sun Java系统应用和WEB服务器都是与J2EE平台兼容的应用服务器。 Sun Java System Application Server在处理HTTP请求时存在漏洞，远程攻击者可能利用此漏洞执行各种攻击。 如果Sun Java System Application Server或Sun Java System Web Server使用Sun Java System Proxy Server的话，由于未能正确地实现HTTP/1.1...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

Sun Java System Proxy Server versions prior to 20061130 are affected by an HTTP request smuggling vulnerability when used with Sun Java System Application Server or Sun Java System Web Server. Exploitation could bypass HTTP request filtering, enable web session hijacking, permit cross-site script...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

PT-2006-6905 · Sun · Sun Java System Application Server +2

Name of the Vulnerable Software and Affected Versions: Sun Java System Proxy Server versions prior to 20061130 Description: The issue allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web caches. This is achieved via...

NetSniper network pioneer works-vulnerability warning-the black bar safety net

NetSniper network tip of the soldiers is in Shanghai on a large lake network system Co., Ltd. developed the network access detection and a controller. It can automatically detect the network without permission the erection of a proxy server is system or an illegal router, and through the illegal...

Sun Solaris kernel SSL proxy server DoS

No description provided...

KGB 1.87 (Local Inclusion) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================== KGB 1.87 Local Inclusion Remote Code Execution Exploit ======================================================== !/usr/bin/php -q -d shortopentag=on ? $devilteam = " :::::::::...

CVE-2006-5037

MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sqcontentsrc parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The vendor...

CVE-2006-5037

CVE-2006-5037 affects MySource Matrix versions after 3.8. The issue allows remote attackers to use the application as an HTTP proxy via a MIME-encoded URL in the sq_content_src parameter, enabling access to arbitrary sites using the server’s IP and enabling cross-site scripting (XSS). The PT-2006...

CVE-2006-5036

MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sqremotepageurl parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The...

IP address of recon and hidden Experiences to talk about-vulnerability warning-the black bar safety net

In the formal variety of“hacking”before, hackers will take a variety of means, the probeyou can also say“scouting”the other side of the host information in order to decide what the most effective method to achieve their own purposes. A look at how hackers learn the most basic network...

How to access blocked sites-bug warning-the black bar safety net

The following methods can also access other blocked website,, so please privately transmitted, is after all public, the more the more dangerous, after providing these services the site also been blocked, the more harm than good. 1, recommended method: use the P2P CDN network access Coral is a P2P...