4582 matches found
SA113 : January 2016 NTP Security Vulnerabilities
SUMMARY Blue Coat products using affected versions of the NTP software distribution from ntp.org are susceptible to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to set the victim's system time to an arbitrary value or cause it to become out of sync. The attacker c...
SA112 : Linux Kernel Keyring Privilege Escalation
SUMMARY Blue Coat products that include affected versions of the Linux kernel and provide means for executing arbitrary code are susceptible to a privilege escalation vulnerability. A malicious local unprivileged user can exploit this vulnerability to escalate their privileges on the system or...
SA111 : OpenSSL Vulnerabilities 28-Jan-2016
SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, and 0.9.8 are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to obtain ephemeral Diffie-Hellman DHE private key information and perform man-in-the-middle attacks on SSL/TLS...
Microsoft Windows WebDAV BSoD Proof Of Concept
/ Source: https://github.com/koczkatamas/CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death code for CVE-2016-0051 MS-016. Full Proof of Concept: https://github.com/koczkatamas/CVE-2016-0051/archive/master.zip...
Exploit for CVE-2016-0051
CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death and...
SA110 : Java Deserialization Vulnerabilities
SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...
SA109 : Multiple OpenSSH Vulnerabilities (January 2016)
SUMMARY Blue Coat products using affected 5.x and 6.x versions of OpenSSH are susceptible to multiple vulnerabilities. An attacker, with access to the management interface, may exploit these vulnerabilities to execute arbitrary code and obtain information from the target's process memory. The...
Blue Coat Systems ProxySG and Advanced Secure Gateway Open Redirect Vulnerability
Blue Coat Systems ProxySG and Advanced Secure Gateway are both secure Web gateway appliances from Blue Coat Systems, USA. An open redirection vulnerability exists in Blue Coat Systems ProxySG and ASG. A remote attacker can exploit this vulnerability by using base64-encoded URLs and plaintext URLs...
CVE-2015-8597
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...
Open redirect
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...
CVE-2015-8597
CVE-2015-8597 affects Blue Coat ProxySG (6.5 before 6.5.8.8) and Advanced Secure Gateway (ASG) 6.6, describing an open redirect vulnerability via coaching pages that can steer users to arbitrary URLs using a base64-encoded URL alongside a plaintext URL. The issue enables potential phishing by exp...
CVE-2015-8597
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...
Directory Traversal Vulnerability in Broadband Authentication and Billing System of Chengdu Starry Blue Ocean Network Technology Co.
Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. A directory traversal vulnerability exists in the broadband authentication and billing system of Chengdu Starry Blue Ocean Network Technology Co. where an attacker can download sensitive...
SA106 : MySQL Vulnerabilities October 2015
SUMMARY Blue Coat products using affected versions of MySQL 5.5 and 5.6 are susceptible to multiple vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary code and gain unauthorized read, insert, update, or delete access to subsets of MySQL Server accessible data. The...
Microsoft Internet Explorer 11 - MSHTML!CObjectElement Use-After-Free (MS15-124)
small -ms-block-progression: lr; -ms-filter: "vv"; function trigger document.execCommand"JustifyLeft"; bl...
Microsoft IE 11 MSHTML!CObjectElement Use-After-Free
Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2015-003 10-December-2015 Vendor: Microsoft, http://www.microsoft.com Affected Products: Internet Explorer Affected Version: IE 11 Vulnerability: MSHTML!CObjectElement Use-After-Free Vulnerability CVE...
SA105 : OpenSSL Vulnerabilities 3-Dec-2015
SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, 1.0.0 and 0.9.8 are susceptible to one or more vulnerabilities. A remote attacker may exploit these vulnerabilities to obtain private key information and information stored in the target's volatile memory. The attacker ca...
blueangelpumps.com XSS vulnerability
Vulnerable URL: http://www.blueangelpumps.com/index.cfm/product/498%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E/100sw.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5166274...
Blue Coat Systems ProxySG SGOS信息泄露漏洞
No description provided by source...
SA104 : OpenSSH Vulnerabilities
SUMMARY Blue Coat products using affected versions of OpenSSH are susceptible to multiple vulnerabilities. An attacker, with access to the management interface, may exploit these vulnerabilities to conduct brute-force password guessing attacks, bypass access restrictions, log in as a different...