4074 matches found
IBM TRIRIGA Application Platform Information Disclosure Vulnerability
IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A security vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to disclose sensitive information by sending HTTP/SOAP que...
Juniper ScreenOS 6.3.x < 6.3.0r21 Malformed SSL/TLS Packet DoS (JSA10732)
The remote host is running a version of Juniper ScreenOS that is 6.3.x prior to 6.3.0r21. It is, therefore, affected by a denial of service vulnerability in the administrative web services that is triggered when handling malformed SSL/TLS packets. An unauthenticated, remote attacker can exploit...
CVE-2016-1268
The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service reboot via a crafted SSL packet...
PT-2016-1750
Name of the Vulnerable Software and Affected Versions Juniper ScreenOS versions prior to 6.3.0r21 Description The issue is related to insufficient input validation in the administrative web services interface. It allows remote attackers to cause a denial of service, resulting in a reboot, by...
CVE-2016-2084
F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5....
Amazon Web Services EC2 Instance Metadata Enumeration (Unix)
The remote host appears to be an Amazon Machine Image. Nessus was able to use the metadata API to collect information about the system. TRUSTED...
FreeBSD : moodle -- multiple vulnerabilities (2d299950-ddb0-11e5-8fa8-14dae9d210b8)
Marina Glancy reports : - MSA-16-0001: Two enrolment-related web services don't check course visibility - MSA-16-0002: XSS Vulnerability in course management search %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
UBUNTU-CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
Cross site request forgery (csrf)
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
CVE-2016-0724
CVE-2016-0724 concerns Moodle’s core enrolment web services: core_enrol_get_course_enrolment_methods and enrol_self_get_instance_info fail to enforce the moodle/course:viewhiddencourses capability. This allows remote authenticated users to obtain sensitive information via the affected web service...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
PT-2016-1309
Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, 3.0.x before 3.0.2 Description The issue is related to the core enrol get course enrolment methods and enrol self get instance info web services ...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-16-0001: Two enrolment-related web services don't check course visibility MSA-16-0002: XSS Vulnerability in course management search...
SAML Raider - SAML2 Burp Extension
SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachelor thesis at the Hochschule für Technik...
602 Gbps! This May Have Been the Largest DDoS Attack in History
Cyber attacks are getting evil and worst nightmare for companies day-by-day, and the Distributed Denial of Service DDoS attack is one of the favorite weapon for hackers to temporarily suspend services of a host connected to the Internet. Until now, nearly every big website had been a victim of th...