PHPLib < 7.4 - SQL Injection

PHPLib SQL Injection Vendor: PHPLib Product: PHPLib Version: newid=true; $this-name = $this-cookiename==""?$this-classname:$this-cookiename; if "" == $id $this-newid=false; switch $this-mode case "get": $id = isset$HTTPGETVARS$this-name ? $HTTPGETVARS$this-name...

Cisco VDS-IS Resource Management Error Vulnerability

Cisco VDS-IS Videoscape Distribution Suite for Internet Streaming Cisco's set of content distribution system solutions for Internet streaming media. A security vulnerability exists in Cisco VDS-IS because the program fails to properly manage TCP sessions in the TCP FIN waiting state. A remote...

Gallery 2 2.0.2 - Multiple Vulnerabilities

Gallery 2 2.0.2 - Multiple Vulnerabilities Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, t...

Cisco Videoscape Distribution Suite for Internet Streaming TCP Session Handling Denial of Service Vulnerability

A vulnerability in TCP connection handling when TCP sessions are terminated via a TCP FIN packet for the Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS could allow an unauthenticated, remote attacker to create a denial of service DoS condition. The vulnerability is due to...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2016-01145)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A security...

Moderate: Red Hat Security Advisory: python-django security update

Updated python-django packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 7.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

PHPSHE 二次注入一枚

简要描述： rt 详细说明： case 'register': if isset$ppesubmit if$db-penum'user', array'username'=pedbhold$gusername peerror'用户名已存在...'; if$db-penum'user', array'useremail'=pedbhold$guseremail peerror'邮箱已存在...'; if strtolower$sauthcode != strtolower$pauthcode peerror'验证码错误'; $sqlset'username' = $pusername;...

Shopify: Passwords Returned in Later Responses.

Passwords submitted to the application are returned in clear form in later responses from the application. This behavior increases the risk that users' passwords will be captured by an attacker. Many types of vulnerability, such as weaknesses in session handling, broken access controls, and...

Moderate: Red Hat Security Advisory: python-django security update

Updated python-django packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores...

From django SECRET_KEY to code execution-vulnerability warning-the black bar safety net

A recent review of the code found in some products in the logon of JS code in the leaked SECRETKEY,the value as the password to encrypt the salt, thus exposing the encryption salt is not good., more important is the django security caused great threat. 0x01 SECRETKEY role SECTETKEY in djanog used...

Django任意代码执行

SECRETKEY作用 SECTETKEY在djanog中使用非常广泛，基本上涉及到安全，加密等的地方都用到了，下面列举一些常见情景： 1，json object的签名 2，加密函数，如密码重置，表单，评论，csrf的key，session数据 这里面就要重点讲到session的问题，在这里使用不当就会导致代码执行 代码执行 settings的session设置 django默认存储session到数据库中，但是可能会比较慢，就会使用到缓存，文件，还有cookie等方式，如果采用了cookie机制则有可能代码执行，settings配置如下： SESSIONENGINE =...

USN-2671-1 python-django vulnerabilities

Eric Peterson and Lin Hua Cheng discovered that Django incorrectly handled session records. A remote attacker could use this issue to cause a denial of service. CVE-2015-5143 Sjoerd Job Postmus discovered that DJango incorrectly handled newline characters when performing validation. A remote...

Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150615)

An invalid free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could cause a DTLS server or client using OpenSSL to crash or, potentially, execute arbitrary code. CVE-2014-8176 A flaw was found in the way the OpenSSL packages shipped...

OpenSSL: Race condition handling NewSessionTicket

A race condition was found in the session handling code of OpenSSL. This issue could possibly cause a multi-threaded TLS/SSL client using OpenSSL to double free session ticket data and crash...

Code injection

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

CVE-2014-8391

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

CVE-2014-8391

CVE-2014-8391 (and CVE-2014-0999) affect Sendio ESP prior to version 7.2.4. The Web interface mishandles sessions, allowing remote authenticated users to access other users’ session data and, in one variant, to disclose session identifiers via URLs in HTTP traffic and similar responses. Two infor...

CVE-2015-0757

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...

ESC 8832 Data Controller Session Hijacking

=begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC 8832 Data Controller Hardware CVE : N/A Yet POC for...

ThinkPHP a filter caused by improper SQL injection vulnerabilities and solutions-vulnerability warning-the black bar safety net

The problem occurs in the session, the Thinkphp support the replacement of the session handle that. the handle includes a Db and Memcache, the following configuration can use database as session storage: Set options in the database to insert the table prefix think can define your own: the /...