220 matches found
WAFW00F v1.0.0 - Detect All The Web Application Firewall!
WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...
Visit Wallarm at Google Cloud Next
April 9–11, San Francisco, CA We are excited to join the community of the GCP professionals and demonstrate Wallarm web and API protection solutions custom-built for Google Cloud-powered applications. A certified GCP-partner, Wallarm delivers AI-powered security solution built to help your busine...
identYwaf - Blind WAF Identification Tool
identYwaf is an identification tool that can recognize web protection type i.e. WAF based on blind inference. Blind inference is being done by inspecting responses provoked by a set of predefined offensive non-destructive payloads, where those are used only to trigger the web protection system in...
Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family [FF, Chrome]
Summary When Kaspersky Protect browser extension is installed in Firefox or Chrome, arbitrary webpages can take control of the Kaspersky command interface and disable parts of the functionality for example. Description Unlike with https://hackerone.com/reports/470544 or...
Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family [IE]
Summary When Kaspersky add-on is installed in Internet Explorer, arbitrary webpages can take control of the Kaspersky command interface and disable parts of the functionality for example. Description Unlike with https://hackerone.com/reports/470544, when the Kaspersky add-on is installed in...
Kaspersky: Unauthorized command execution in Web protection component of Anti-Virus products family
Summary When no browser extension is installed, arbitrary webpages can take control of the Kaspersky command interface and disable parts of the functionality for example. Description Without a browser extension e.g. because extension installation not confirmed by user, unsupported like in MS Edge...
Kaspersky: Web protection component in Anti-Virus products family uses predictable links for certificate warnings
Summary Websites can predict links used in certificate warnings, Safe Money prompts, anti-phishing warnings and similar pages. This allows them to initiate actions without the user's knowledge. Description The links used to override certificate warnings have the following format: https:///?kiscup...
Cisco device config dumping
Quick guide to recovering configs from Cisco switches and routers We have recently done work in situations where recovering the Cisco config from one device e.g. an edge switch can give us useful information. This includes: VLANs even for VLANs that are not used on that piece of equipment Which...
CQU-LANKERS Cross-Site Scripting Vulnerability
CQU-LANKERS is a system of university community services. A cross-site scripting vulnerability exists in the public/api.php file in CQU-LANKERS 2017-11-02 and earlier versions, which can be exploited by remote attackers to bypass the Web Application Protection System with the help of the 'callbac...
The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary JavaScript code in the user’s browser.
The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...
CVE-2016-10717
CVE-2016-10717 affects Malwarebytes Anti-Malware Consumer (versions ≤ 2.2.1; fixed in 3.0.4). A flaw in the encryption and permission model allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData), enabling execution of unauthorized applicati...
Threat Outbreak Alert RuleID32029: Email Messages Distributing Malicious Software on February 16, 2018
Medium Alert ID: 56851 First Published: 2018 February 16 17:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32029 may contain the following files: Name |...
[SECURITY] Fedora 26 Update: rubygem-rack-protection-1.5.3-5.fc26
This gem protects against typical web attacks. Should work for all Rack apps, including Rails...
Announcing Malwarebytes Endpoint Protection, a next-generation antivirus replacement for businesses
Six months ago, we announced Malwarebytes 3.0, a next-generation antivirus replacement for home users. Today, I am happy to announce Malwarebytes Endpoint Protection, its equivalent for businesses. Malwarebytes Endpoint Protection includes an easy to deploy, scalable cloud platform that allows yo...
Sophos Web Protection Appliance Reports RCE
Remote command execution vulnerability in Sophos Web Protection Appliance Reports token parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
WordPress Plugin CopySafe Web Protection Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Cross-site request forgery exists in the CopySafe Web Protection plugin...
CVE-2017-8100
There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...
CVE-2017-8100
There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...
CVE-2017-8100
The CVE-2017-8100 entry concerns the CopySafe Web Protection WordPress plugin, affecting versions prior to 2.6. A CSRF vulnerability allows remote attackers to change plugin settings. Public references in CNVD-2017-06576 and related databases confirm the impact and exploitation context. Remediati...
