38 matches found
Squid buffer overflow vulnerability (CNVD-2020-25818)
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A buffer overflow vulnerability exists in Squid 4.7 and earlier versions. An attacker can exploit this vulnerability t...
Squid Heap Overflow Vulnerability
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in Squid 4.7 and earlier versions. An attacker can exploit this vulnerability to cause...
Squid cachemgr.cgi Injection Vulnerability
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, proxy Internet access, etc. cachemgr.cgi is one of the cache managers. An injection vulnerability exists in versions prior to Squid 4.9. The...
Squid Information Disclosure Vulnerability (CNVD-2020-04521)
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain information...
New Cache Poisoning Attack Lets Attackers Target CDN Protected Sites
A team of German cybersecurity researchers has discovered a new cache poisoning attack against web caching systems that could be used by an attacker to force a targeted website into delivering error pages to most of its visitors instead of legitimate content or resources. The issue could affect...
Squid cachemgr.cgi Tool Denial of Service Vulnerability
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, proxy Internet access, etc. cachemgr.cgi is one of the cache managers. A security vulnerability exists in the cachemgr.cgi tool in Squid. An...
Squid Buffer Overflow Vulnerability
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A buffer overflow vulnerability exists in Squid versions 4.0.23 through 4.7. The vulnerability originates when a netwo...
Algolia: Web Cache Deception Attack (XSS)
@testingforbugs identified an issue related to web caching which could lead to XSS attacks...
[SECURITY] Fedora 29 Update: squid-4.4-1.fc29
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by exposure of sensitive information to be cached by browser (CVE-2016-6097)
Summary IBM Security Key Lifecycle Manager allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Attackers with local access or malware installed on the user's...
Squid HTTP proxy information disclosure vulnerability
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An information disclosure vulnerability exists in the Squid HTTP proxy. An attacker can exploit...
Squid HTTP Caching Proxy Buffer Overflow Vulnerability (CNVD-2016-02510)
Squid is a suite of proxy server and web caching server software. Squid suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request, crash an application, or execute arbitrary code...
Squid HTTP Caching Proxy Buffer Overflow Vulnerability (CNVD-2016-02509)
Squid is a suite of proxy server and web caching server software. Squid suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request, crash an application, or execute arbitrary code...
Squid Denial of Service Vulnerability (CNVD-2016-01442)
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the http.cc file in Squid versions 3.x prior to 3.5.15 and 4....
iOS apps vulnerable to HTTP Request Hijacking attacks over WiFi
Security researchers Adi Sharabani and Yair Amit have disclosed details about a widespread vulnerability in iOS apps, that could allow hackers to force the apps to send and receive data from the hackers' own servers rather than the legitimate ones they were coded to connect to. Speaking about the...
[SECURITY] Fedora 16 Update: squid-3.2.0.11-1.fc16
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
[SECURITY] Fedora 13 Update: squid-3.1.8-1.fc13
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
