HTTPie - a CLI, cURL-like tool for humans

HTTPie pronounced aych-tee-tee-pie is a command line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. It provides a simple http command that allows for sending arbitrary HTTP requests using a simple and natural syntax, and displays colorized output...

The vulnerability of the Moodle learning management system allows a hacker to alter the settings of the chat ban.

The vulnerability of the message/externallib.php component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the settings for chat messages by using...

The vulnerability of the Moodle learning management system allows a hacker to bypass access restrictions for managing files.

The vulnerability of the files/externallib.php sub-component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions to file management by using web...

Web Services Penetration Testing: WS-Attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...

[SECURITY] Fedora 22 Update: python-keystonemiddleware-1.3.2-1.fc22

This package contains middleware modules designed to provide authentication and authorization features to web services other than OpenStack Keystone. The most prominent module is keystonemiddleware.authtoken. This package does not expose any CLI or Python API features...

McAfee ePolicy Orchestrator Cross Site Scripting Vulnerability (Jun 2015)

McAfee ePolicy Orchestrator is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

php: type confusion issue in unserialize() with various SOAP methods

Multiple flaws were discovered in the way PHP's Soap extension performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to disclose portion of its memory or crash...

CVE-2015-4559

Cross-site scripting XSS vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator ePO before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator ePO before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4559

Cross-site scripting XSS vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator ePO before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4559

McAfee ePolicy Orchestrator (ePO) – CVE-2015-4559: Cross-site scripting vulnerability in the Java core web services’ deployment feature. The issue allows injection of arbitrary web script/HTML via unspecified vectors in ePO before version 5.1.2. Connected sources (OpenVAS entry) corroborate an XS...

CVE-2015-4345

The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-4345

CVE-2015-4345 affects Drupal's RESTful Web Services RESTWS module (Drupal 7.x). The vulnerability is in the Basic Auth submodule: RESTWS 7.x-1.x versions before 7.x-1.5 and 7.x-2.x before 7.x-2.3 cache pages for authenticated requests, which can lead to information disclosure of potentially sensi...

CVE-2015-4345

The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-6628

Name of the Vulnerable Software and Affected Versions Intel McAfee ePolicy Orchestrator ePO versions prior to 5.1.2 Description The issue is related to a cross-site scripting XSS vulnerability in the product deployment feature of the Java core web services. This allows remote attackers to inject...

CVE-2015-4559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator ePO before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4345: Exposure of Sensitive Information to an Unauthorized Actor

The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-6527

Name of the Vulnerable Software and Affected Versions Drupal RESTful Web Services module versions 7.x-1.x before 7.x-1.5 Drupal RESTful Web Services module versions 7.x-2.x before 7.x-2.3 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors because...

Moodle 'login/token.php' Vulnerable

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in the Moodle 'login/token.php' script. A remote attacker could exploit this vulnerability by creating ...