Barracuda Web Firewall 660 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...

Barracuda Web Firewall 660 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Web Firewall 660 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 Release Date: ============= 2011-12-16 Vulnerability Laboratory ID VL-ID: ==================================== 30...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...

CVE-2011-3140

IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass intended intrusion prevention by dividing a...

http-waf-detect NSE Script

Attempts to determine whether a web server is protected by an IPS Intrusion Prevention System, IDS Intrusion Detection System or WAF Web Application Firewall by probing the web server with malicious payloads and detecting changes in the response code and body. To do this the script will send a...

CVE-2011-3140

IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass intended intrusion prevention by dividing a...

CVE-2011-3140

CVE-2011-3140 affects IBM Web Application Firewall used on G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030. The issue is in how the product handles query strings with multiple instances of the same parameter, allowing a malicious user to bypass intrusion prevention by ...

IBM Web Application Firewall Bypass

Exploit for windows platform in category remote exploits IBM Web Application Firewall Bypass Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7.0 and later software within IBM Security Network IPS GX products, IBM Security Server...

IBM Web Application Firewall - Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7....

IBM Web Application Firewall - Bypass

IBM Web Application Firewall - Bypass Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities...

IBM Web Application Firewall Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7....

CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ IBM WebSphere Application Server Cross-Site Request Forgery 1. Advisory Information Title: IBM WebSphere Application Server Cross-Site Request Forgery Advisory ID:...

IBM WebSphere Application Server 7.0.0.13 CSRF Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ IBM WebSphere Application Server Cross-Site Request Forgery 1. Advisory Information Title: IBM WebSphere Application Server Cross-Site...

CVE-2011-0767

Cross-site scripting XSS vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759...

CVE-2011-0767

The CVE-2011-0767 vulnerability affects Imperva SecureSphere Web Application Firewall, specifically the management GUI in MX Management Server across versions 6.2, 7.x, and 8.x. Root cause: improper validation/sanitization of user-controlled input stored and later returned to the administrator in...

Imperva SecureSphere SQL Injection Filter Bypass

======================================================================= Imperva SecureSphere - SQL injection filter bypass ======================================================================= Affected Software : SecureSphere Web Application Firewall WAF Severity : High Local/Remote : Remote...

SQL Attack Hits Barracuda Networks, Exposes Data

Barracuda Networks found themselves the victim of an SQL injection attack over the weekend. The breach did not affect any financial information but did compromise a database containing the names and e-mails of some of the company’s partners, employees and leads. According to a post by Barracuda’s...

Barracuda IMFirewall 620 - Input Validation Vulnerability

Document Title: =============== Barracuda IMFirewall 620 - Input Validation Vulnerability References Source: ==================== EDB-ID: 10347 http://www.exploit-db.com/exploits/10347/ Release Date: ============= 2011-03-16 Vulnerability Laboratory ID VL-ID: ====================================...

Barracuda Networks Multiple Products 'view_help.cgi' Directory Traversal Vulnerability

Multiple Barracuda Networks products are prone to a directory- traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker can exploit this vulnerability using directory- traversal characters '../' to access files that contain sensitive information th...