Lucene search
+L

112 matches found

Hacker One
Hacker One
added 2015/05/08 9:51 p.m.57 views

Udemy: Misconfigured SPF Record Flag

Hello Team , Description : this report is about misconfigured spf record flag , which can be use to abuse the organization by posing the identity , which allowing to fake mailing on behalf of respected organization . About the Issue : as i seen the SPF and TXT record for the Udemy.com which is :...

6.8AI score
SaveExploits0
Hacker One
Hacker One
added 2015/04/13 9:3 p.m.33 views

Coin.Space: SMTP protection not used

Hi I'm checking your website found spf record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...

6.9AI score
SaveExploits0
n0where
n0where
added 2015/01/19 8:36 a.m.32 views

Streisand

The Internet can be a little unfair. It’s way too easy for ISPs, telecoms, politicians, and corporations to block access to the sites and information that you care about. But breaking through these restrictions is tough . Or is it? Introducing Streisand A single command sets up a brand new server...

0.3AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.27 views

openSUSE Security Update : python-apache-libcloud (openSUSE-SU-2014:0198-1)

Updated to 0.13.3 bnc857209, CVE-2013-6480 + Security fix release, for destroying nodes on digitalOcean 'datascrub' method is always invoked - Require python-setuptools instead of distribute upstreams merged - Updated to 0.13.2 - General : - Don't sent Content-Length: 0 header with POST and PUT...

2.1CVSS5.4AI score0.0206EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2014/01/08 12:0 a.m.65 views

[CVE-2013-6480] Libcloud doesn't send scrub_data query parameter when destroying a DigitalOcean node

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2013-6480 Libcloud doesn't send scrubdata query parameter when destroying a DigitalOcean node Severity: Low Vendor: Apache Software Foundation Project: Apache Libcloud http://libcloud.apache.org/ Affected Versions: Apache Libcloud 0.12.3 to 0.13...

2.1CVSS0.3AI score0.0206EPSS
SaveExploits2
NVD
NVD
added 2014/01/07 6:55 p.m.16 views

CVE-2013-6480

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

2.1CVSS5.5AI score0.0206EPSS
SaveExploits2References6
OSV
OSV
added 2014/01/07 6:55 p.m.18 views

PYSEC-2014-97

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

2.1CVSS2.9AI score0.0206EPSS
SaveExploits2References7
PyPA
PyPA
added 2014/01/07 6:55 p.m.7 views

PYSEC-2014-97

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

2.1CVSS6.2AI score0.0206EPSS
SaveExploits2References7Affected Software1
Prion
Prion
added 2014/01/07 6:55 p.m.12 views

Design/Logic Flaw

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

2.1CVSS6.1AI score0.0206EPSS
SaveExploits2References6Affected Software1
CVE
CVE
added 2014/01/07 6:0 p.m.69 views

CVE-2013-6480

CVE-2013-6480 affects Libcloud 0.12.3–0.13.2 where destroy DigitalOcean API calls do not set scrub_data, enabling local users with access to a new VM to obtain sensitive data. The incident is documented by multiple advisories (GHSA-G892-9H8M-R69R, OSV) and vendor/openSUSE/Fedora records. The publ...

2.1CVSS5.5AI score0.0206EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2014/01/07 6:0 p.m.20 views

CVE-2013-6480

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

5.5AI score0.0206EPSS
SaveExploits2References6
Debian CVE
Debian CVE
added 2014/01/07 6:0 p.m.77 views

CVE-2013-6480

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

2.1CVSS5.5AI score0.0206EPSS
SaveExploits2
Rows per page
Query Builder