ssp-worldwide.com XSS vulnerability

Open Bug Bounty ID: OBB-663580 Description| Value ---|--- Affected Website:| ssp-worldwide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Network security: Minimum session security for NTLM SSP based clients

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsecminsessionsecntlmserver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Network security: Minimum session security for NTLM SSP based including secure RPC servers Authors: Emanuel Moss Copyright: Copyright c 20...

Microsoft Windows: Network security: Minimum session security for NTLM SSP based clients

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsecminsessionsecntlmclient.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Network security: Minimum session security for NTLM SSP based including secure RPC clients Authors: Emanuel Moss Copyright: Copyright c 20...

POP3 Host Information in NTLM SSP

Nessus can obtain information about the host by examining the NTLM SSP challenge issued during the NTLM authentication, over POP3 protocol. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108806; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate"...

MSSQL Host Information in NTLM SSP

Binary data mssqlntlminfo.nbin...

ssp-rtb.sape.ru Open Redirect vulnerability

Vulnerable URL:...

Directory traversal

Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary files via a crafted URL...

CVE-2016-6023

IBM Sterling Secure Proxy Configuration Manager is affected by CVE-2016-6023, a directory traversal vulnerability in SSP 3.4.2 (prior to 3.4.2.0 iFix 8) and 3.4.3 (prior to 3.4.3.0 iFix 1). An attacker can read arbitrary files via a crafted URL. The issue is addressed by applying the fixed releas...

CVE-2016-6027

CVE-2016-6027 affects IBM Sterling Secure Proxy Configuration Manager (SSP CM). The issue is that HSTS protection was not enabled in SSP Configuration Manager, making it possible for an attacker to obtain sensitive information or modify data by exploiting HTTP instead of HTTPS. Affected versions ...

PT-2021-3057

Name of the Vulnerable Software and Affected Versions 802.11 standard affected versions not specified Check Point GAiA affected versions not specified Description The issue concerns a flaw in the authentication procedure of the 802.11 standard, which underlies Wi-Fi Protected Access WPA, WPA2, an...

Cisco MiniUPnP Stack Smashing Protection Attack

The Internet of Things security challenge is twofold: finding bugs, and more urgent—fixing them. Cisco’s Talos security intelligence and research group found and privately disclosed a serious and trivially exploitable client-side bug in MiniUPnP that was patched in September of last year. The...

HT Editor 2.0.20 Buffer Overflow (ROP PoC)

No description provided by source. !/usr/bin/perl =head1 TITLE HT Editor 2.0.20 Buffer Overflow ROP PoC =head2 DESCRIPTION Since version 2.0.18, the stack overflow vulnerability has not been corrected, which I assume would make it 0day? I consequently recoded an exploit, as memory addresses have...

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (Linux)

No description provided by source. $Id: proftptelnetiac.rb 11525 2011-01-09 23:33:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

UBUNTU-CVE-2013-4533

Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-rxlevel value in a savevm image...

Code injection

Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules before 7.17sp1E4 allows remote attackers to cause a denial of service Analysis Engine process hang or device reload via fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCue51272...

CVE-2013-1243

CVE-2013-1243 affects Cisco IPS Software running on ASA 5500-X IPS-SSP (before 7.1(5)E4), IPS 4500 sensors (before 7.1(6)E4), and IPS 4300 sensors (before 7.1(5)E4). The vulnerability stems from the IP stack misprocessing malformed IPv4 packets, allowing remote unauthenticated attackers to trigge...

Solaris 6 (sparc) : 110948-04

SSP 3.4: ssp 3.234 snmpd searches for libs in Sun internal path. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 110948-04

SSP 3.4: ssp 3.234 snmpd searches for libs in Sun internal path. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 7 (sparc) : 110948-04

SSP 3.4: ssp 3.234 snmpd searches for libs in Sun internal path. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

FedRAMP PMO - FedRAMP Process and Developing SSP webinar Q&A

The FedRAMP program continues to gain momentum and GSA and the FedRAMP PMO conduct great, interactive, webinars available to attend live or to watch later. There is much to learn from the GSA on how to navigate the FedRAMP process according to their requirements...