1497 matches found
Barracuda SSL VPN - 'fileSystem.do' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...
Barracuda SSL VPN - launchAgent.do?return-To Cross-Site Scripting
Barracuda SSL VPN - launchAgent.do?return-To Cross-Site Scripting source: https://www.securityfocus.com/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...
Barracuda SSL VPN - Input Filter Bypass Vulnerability
Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...
Barracuda SSL VPN - Input Filter Bypass Vulnerability
Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...
Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities
Document Title: =============== Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=561 Barracuda Networks Security ID: BNSEC-278 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-I...
Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
Overview The Cisco AnyConnect ActiveX control contains a buffer overflow vulnerability, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco AnyConnect is an SSL VPN solution that is commonly initiated through use of a web browser...
Barracuda SSL VPN 480 Script Insertion
Title: ====== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=35 VL-ID: ===== 35 Introduction: ============= The Barracuda SSL VPN is an integrated hardware and software solution enabling secure...
Barracuda SSL VPN 480 - Multiple Web Vulnerabilities
Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...
Barracuda SSL VPN 480 - Multiple Web Vulnerabilities
Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...
Cisco IOS SSL VPN Vulnerability (cisco-sa-20100922-sslvpn)
Cisco IOS Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...
Citrix Access Gateway Plug-in ActiveX Code Execution (CVE-2011-2882)
Citrix Access Gateway is an enhanced SSL VPN system which not only provides VPN access, but also enables application level access control. The system is available as standalone software, a physical appliance or a virtual machine. It is designed to work with Citrix XenApp and XenDesktop to allow...
Barracuda Web Firewall 660 - Multiple Web Vulnerabilities
Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...
Barracuda Web Firewall 660 - Multiple Web Vulnerabilities
Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...
SonicWALL Aventail SSL-VPN SQL Injection
================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...
SonicWALL Aventail SSL-VPN - SQL Injection
SonicWALL Aventail SSL-VPN - SQL Injection ================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar...
SonicWALL Aventail SSL-VPN - SQL Injection
================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...
SonicWALL Aventail SSL-VPN SQL Injection Vulnerability
Exploit for php platform in category web applications Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Vulnerbility SonicWALL Aventail SSL-VPN is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before usin...
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)
An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...
Cisco ASA 5500 Series Multiple DoS Vulnerabilities (cisco-sa-20100804-asa)
The remote Cisco ASA is missing a security patch and may be vulnerable to the following issues : - Multiple DoS vulnerabilities in the SunRPC inspection engine that can be triggered by sending unspecified UDP packets. CVE-2010-1578, CVE-2010-1579, CVE-2010-1580 - Multiple TLS DoS vulnerabilities...
