8512 matches found
4nonimizer - A bash script for anonymizing the public IP managing the connection to TOR and different VPNs providers
What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several pre-configured VPN connections to different peers .ovpn files and...
CVE-2016-6436
Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...
CVE-2016-6436
Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...
CVE-2016-6436
Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...
CVE-2016-6436
Affected: Cisco Host Scan Engine (Host Scan package) in ASA Web VPN. Versions 3.0.08062 through 3.1.14018 are vulnerable to cross-site scripting (XSS) via a crafted URL in the HostScan Engine. Root cause: insufficient input validation allowing injection of arbitrary script/HTML when processing us...
Cisco Host Scan Package Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Host Scan package could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of a Cisco Adaptive Security Appliance ASA Web VPN deployment. The vulnerability is due to insufficient input validation of a user-supplied...
Citrix Gateway VPN Users are Unable to Resolve IPv4 DNS When ISP has IPv6 Enabled
Citrix Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled...
HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web
HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web when traffic is tunneled through the NetScaler. This issue occurs when the MDX Policy is set for Secure Browse. If the preferred VPN mode on the app is set to FULL VPN TUNNEL, then the issue will not occur...
Netscaler Gateway license not getting applied and ICA user count shows as 0
Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...
September 29, 2016 — KB3194496 (OS Builds 14393.222)
None None...
VulnCheck KEV: CVE-2014-3393
The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.6 before 8.61.14, 9.0 before 9.04.24, 9.1 before 9.15.12, and 9.2 before 9.22.4 does not properly implement authentication, which allows remote...
openSUSE Security Update : opera (openSUSE-2016-1101)
This update to Opera 40.0.2308.54 contains feature updates and bug fixes. - runs Chromium 53.0.2785.101 bsc996648 - built-in VPN service - Various video playback improvements - Support for DHE-based TLS ciphers has been removed %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Kerio Control Unified Threat Management 9.1.0 build 1087 / 9.1.1 build 1324 - Multiple Vulnerabiliti
Exploit for php platform in category web applications Video: https://www.youtube.com/watch?v=yOWz25sHMI SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Potential backdoor access through multiple vulnerabilities product...
FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel
Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...
Cisco EPC 3925 XSS / CSRF / HTTP Response Injection / DoS
Title: Cisco EPC 3925 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco EPC3925 EuroDocsis 3.0 2-PORT Voice Gateway Date: 15.09.2016 Author: Patryk Bogdan ======== Vulnerability list: 1. HTTP Response Injection via 'Lang' Cookie 2. DoS via 'Lang' Cookie 3. DoS in...
Cisco EPC 3925 - Multiple Vulnerabilities
Exploit for asp platform in category web applications Title: Cisco EPC 3925 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco EPC3925 EuroDocsis 3.0 2-PORT Voice Gateway Date: 15.09.2016 Author: Patryk Bogdan ======== Vulnerability list: 1. HTTP Response Injection...
Cisco VPN Client 5.x < 5.0.07.0440 Untrusted Search Path DLL Privilege Escalation
The version of the Cisco VPN client installed on the remote host is 5.x prior to 5.0.07.0440. It is, therefore, affected by a flaw related to loading dynamic link library DLL files due to searching fixed paths that may not be trusted or under user control. A local attacker can exploit this, via a...
Cisco VPN Client 5.x <= 5.0.07.0440 vpnclient.ini Privilege Escalation
The version of the Cisco VPN client installed on the remote host is 5.x prior or equal to 5.0.07.0440. It is, therefore, affected by a flaw due to insecure permissions for file vpnclient.ini. A local attacker can exploit this, by inserting an arbitrary program name in the Command field of the...
Combat a VPN platform vulnerability discovery-vulnerability warning-the black bar safety net
CSRF Used to those not accustomed to the habit of Habit first look at the change the password no matter what to do the capture and see, because something tells me he has a problem Just started to get back the password Like the debug the next data packet, intuition tells me there is a problem, the...
