PT-2014-3948

Name of the Vulnerable Software and Affected Versions IBM MessageSight versions 1.x before 1.1.0.0-IBM-IMA-IT01015 Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption. This is achieved via WebSockets MQ Telemetry Transport MQTT data...

PT-2014-3947

Name of the Vulnerable Software and Affected Versions IBM MessageSight versions 1.x before 1.1.0.0-IBM-IMA-IT01015 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash and message data loss, via malformed headers during a WebSockets connection...

[Bluebox-ng] UC/VoIP Security Tool

Bluebox-ng is a next generation UC/VoIP security tool. It has been written in CoffeeScript using Node.js powers. This project is "our 2 cents" to help to improve information security practices in VoIP/UC environments. GitHub repo : https://github.com/jesusprubio/bluebox-ng IRCFreenode :...

Adobe ColdFusion 10 WebSockets CFC Public Method Invocation (APSB13-19) (credentialed check)

The remote Windows host is running a version of ColdFusion that allows an unauthenticated, remote attacker to execute unauthorized methods. ColdFusion component methods that use the 'public' modifier can be invoked remotely using WebSockets. Only methods that use the 'remote' modifier should be...

Adobe ColdFusion安全限制绕过漏洞(CVE-2013-3350)

BUGTRAQ ID: 61042 CVECAN ID: CVE-2013-3350 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion在实现上存在远程安全限制绕过漏洞，攻击者可利用此漏洞通过WebSockets调用ColdFusion组件上的通用方法。 0 Adobe ColdFusion 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb13-19）以及相应补丁: apsb13-19：Security update: Hotfixes available for ColdFusion...

CVE-2013-3350

Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components CFC public methods via WebSockets...

Code injection

Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components CFC public methods via WebSockets...

CVE-2013-3350

Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components CFC public methods via WebSockets...

CVE-2013-3350

Adobe ColdFusion 10 prior to Update 11 is vulnerable to a WebSockets-based issue that allows remote invocation of ColdFusion Components (CFC) public methods, exposing a risk of arbitrary method invocation on affected servers. Publicly documented behavior in multiple feeds points to remote access ...

PT-2013-4312

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion version 10 before Update 11 Description The issue allows remote attackers to call ColdFusion Components CFC public methods via WebSockets. Recommendations For Adobe ColdFusion version 10, apply Update 11 to resolve the issue...

CVE-2013-3350: Undefined Security Weakness

Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components CFC public methods via WebSockets...

Thunderbird < 16.0.1 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is earlier than 16.0.1 and is therefore potentially affected by the following security issues : - An unspecified error related to the WebSockets implementation and the function 'mozilla::net::FailDelayManager::Lookup' can allow application crashes and...

Firefox < 16.0.1 Multiple Vulnerabilities

The installed version of Firefox is earlier than 16.0.1 and is therefore potentially affected by the following security issues : - An unspecified error related to the WebSockets implementation and the function 'mozilla::net::FailDelayManager::Lookup' can allow application crashes and potentially,...

Firefox < 16.0.1 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 16.0.1 and is therefore potentially affected by the following security issues : - An unspecified error related to the WebSockets implementation and the function 'mozilla::net::FailDelayManager::Lookup' can allow application crashes and potentially,...

Mozilla Firefox 'WebSockets' Denial of Service Vulnerability (Windows)

The host is installed with Mozilla firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtswebsocketsdoswin.nasl 5956 2017-04-14 09:02:12Z teissa $ Mozilla Firefox 'WebSockets' Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyright ...

Mozilla Firefox 'WebSockets' Denial of Service Vulnerability (Mac OS X)

The host is installed with Mozilla firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtswebsocketsdosmacosx.nasl 5931 2017-04-11 09:02:04Z teissa $ Mozilla Firefox 'WebSockets' Denial of Service Vulnerability Mac OS X Authors: Madhuri D Copyright:...

Mozilla Seamonkey 'WebSockets' Denial of Service Vulnerability (Windows)

The host is installed with Mozilla Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeywebsocketsdoswin.nasl 6065 2017-05-04 09:03:08Z teissa $ Mozilla Seamonkey 'WebSockets' Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright:...

Mozilla Thunderbird 'WebSockets' Denial of Service Vulnerability (Mac OS X)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdwebsocketsdosmacosx.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla Thunderbird 'WebSockets' Denial of Service Vulnerability Mac OS X Authors: Arun Kallavi...

Mozilla Thunderbird 'WebSockets' Denial of Service Vulnerability - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Seamonkey 'WebSockets' Denial of Service Vulnerability - Windows

Mozilla Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...