91596 matches found
CVE-2021-34825
Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system...
curl: Inferior OCSP verification
Libcurl offers "OCSP stapling" via the CURLOPTSSLVERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-stat...
Huawei Data Communication: SSL is configured with an insecure algorithm
If the cipher-suite-list command contains insecure algorithms, the service that references this rule has security risks. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Cisco HyperFlex HX Data Platform File Upload / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco HyperFlex HX Data Platform unauthenticated file upload to RCE CVE-2021-1499', 'Description' = %q This module exploits an unauthenticated fi...
Huawei Data Communication: It should not be set to TLS1.1
If TLS 1.1 is configured, security risks exist. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei Data Communication: The client ssl-verify peer is not configured on the HTTP client
Checks if setting Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
TP-Link TL-WPA4220 Information Disclosure Vulnerability
Tp-link TP-Link TL-WPA4220 is a home wireless WiFi bridge that extends wireless signals from China's Tp-link. The device can transmit data at high speed over the line to extend the network to areas that are currently not covered. The TP-Link TL-WPA4220 suffers from an information disclosure...
Debian DLA-2686-1 : python-urllib3 - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2686 advisory. Several vulnerabilities were discovered in python-urllib3, a HTTP client for Python. CVE-2018-20060 Urllib3 does not remove the Authorization HTTP header when...
CVE-2021-28858
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...
Information disclosure
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...
CVE-2021-28858
CVE-2021-28858 affects TP-Link TL-WPA4220 (firmware 4.0.2 Build 20180308 Rel.37064). The vulnerability is an information-disclosure issue caused by not using SSL by default, enabling an attacker on the local network to monitor traffic and capture cookies and other sensitive information. The provi...
CVE-2021-28858
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...
[SECURITY] [DLA 2686-1] python-urllib3 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2686-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA June 15, 2021 https://wiki.debian.org/LTS -...
curl: CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport
Summary: libcurl Secure Transport SSL backend fails to secure the CURLOPTSSLCERT against current directory file overriding the keychain nickname specified. This leads to the possibility of locally created file overriding the CURLOPTSSLCERT specified certificate and thus causing denial of service...
HashiCorp Nomad Remote Command Execution Exploit
This Metasploit module lets you create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the rawexec driver, which runs with high privileges. Development servers and clients explicitly enabling the rawexec plugin can spawn these type of jobs. Regular exec job...
The vulnerability of the SSL protocol implementation in the IBM DB2 database management system allows a hacker to induce a service failure.
The vulnerability of the SSL protocol implementation in the IBM DB2 database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.
The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the execution of operations outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST request...
HashiCorp Nomad Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HashiCorp Nomad Remote Command Execution', 'Description' = %q Create a batch job on HashiCorp's Nomad service to spawn a shell. The default optio...
The vulnerability of the SSL-VPN portal for FortiOS operating systems allows attackers to perform cross-site scripting attacks.
The vulnerability of the SSL-VPN portal for FortiOS operating systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
nginx 0.5.6 <= 1.7.4 Insufficient Session Expiration Vulnerability
nginx is prone to an insufficient session expiration vulnerability due to a problem with SSL session cache. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...