CVE-2014-5376

Moab Authentication Bypass (CVE-2014-5376): Moab before 7.2.9 and 8 before 8.0.0 can sign messages with a pre-generated key, bypassing validation that the signing user matches the actor in the message. This allows remote authenticated users to impersonate arbitrary users via the actor field, enab...

Moab < 7.2.9 - Authentication Bypass

Moab Authentication Bypass : CVE-2014-5300 Software: Moab Affected Versions: All versions prior to Moab 7.2.9 and Moab 8 CVE Reference: CVE-2014-5300 Author: John Fitzpatrick, MWR Labs http://labs.mwrinfosecurity.com/ Severity: High Risk Vendor: Adaptive Computing Vendor Response: Resolved in Moa...

Moab 7.2.9 - Authentication Bypass

Moab 7.2.9 - Authentication Bypass Moab Authentication Bypass : CVE-2014-5300 Software: Moab Affected Versions: All versions prior to Moab 7.2.9 and Moab 8 CVE Reference: CVE-2014-5300 Author: John Fitzpatrick, MWR Labs http://labs.mwrinfosecurity.com/ Severity: High Risk Vendor: Adaptive Computi...

Moab User Impersonation

Moab User Impersonation : CVE-2014-5375 Software: Moab Affected Versions: All current versions of Moab. However, the impact is limited in Moab 7.2.9 and Moab 8. CVE Reference: CVE-2014-5375 Author: John Fitzpatrick, Luke Jennings MWR Labs http://labs.mwrinfosecurity.com/ Severity: High Risk Vendo...

Moab Workload Manage 7.2.9 / 8 User Impersonation Vulnerability

Moab versions prior to 7.2.9 and 8 suffer from a user impersonation vulnerability. Moab User Impersonation : CVE-2014-5375 Software: Moab Affected Versions: All current versions of Moab. However, the impact is limited in Moab 7.2.9 and Moab 8. CVE Reference: CVE-2014-5375 Author: John Fitzpatrick...

Moab Workload Manage Insecure Message Signing Authentication Bypass Vulnerability

Moab suffers from an insecure message signing authentication bypass vulnerability. All versions up to 8 can be affected depending on the configuration. Moab Authentication Bypass insecure message signing : CVE-2014-5376 Software: Moab Affected Versions: Dependent on configuration, can affect all...

USN-2339-2 libgcrypt11 vulnerability

Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was susceptible to an adaptive chosen ciphertext attack via physical side channels. A local attacker could use this attack to possibly recover private keys...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

OpenSSL 0.9.x CBC Error Information Leakage Weakness

No description provided by source. source: http://www.securityfocus.com/bid/6884/info A side-channel attack against implementations of SSL exists that, through analysis of the timing of certain operations, can reveal sensitive information to an active adversary. This information leaked by...

TORQUE Resource Manager 2.5.x-2.5.13 - Stack Based Buffer Overflow Stub

No description provided by source. !/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage:...

Adaptive Website Framework 1.11 Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

Cisco Adaptive Security Appliance 8.x Web VPN FTP or CIFS Authentication Form Phishing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's logi...

CVE-2014-2502

Cross-site scripting XSS vulnerability in rsafso.swf in EMC RSA Adaptive Authentication Hosted 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in rsafso.swf in EMC RSA Adaptive Authentication Hosted 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2502

CVE-2014-2502 refers to a cross-site scripting (XSS) vulnerability in the rsa_fso.swf component of EMC RSA Adaptive Authentication (Hosted) 11.0. The issue is that an attacker could inject arbitrary web script/HTML via unspecified vectors, potentially affecting the integrity of user sessions expo...

CVE-2014-2502

Cross-site scripting XSS vulnerability in rsafso.swf in EMC RSA Adaptive Authentication Hosted 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

TORQUE Resource Manager 2.5.x-2.5.13 - Stack Based Buffer Overflow Stub

Exploit for linux platform in category remote exploits !/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage:...

TORQUE Resource Manager 2.5.x < 2.5.13 - Stack Buffer Overflow Stub

!/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage: http://www.adaptivecomputing.com/ Software Link:...

PT-2014-4512 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A memory leak in the SIP inspection engine allows remote attackers to cause a denial of service via crafted SIP packets. This issue affects the Sessio...

Cisco Adaptive Security Appliance SSL VPN远程权限提升漏洞

Bugtraq ID:66748 CVE ID:CVE-2014-2127 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.48之前版本、8.32.40之前版本、8.47.9之前版本、8.61.13之前版本、9.04.1之前版本、9.14.3之前版本在SSL VPN门户连接中的权限验证时，没有正确处理管理会话信息，这可使经过身份验证的远程用户通过建立无客户端SSL...