fineartabstract.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-974583 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting fineartabstract.com websi...

thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 52.9...

UBUNTU-CVE-2018-12372

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 52.9...

http-traceroute NSE Script

Exploits the Max-Forwards HTTP header to detect the presence of reverse proxies. The script works by sending HTTP requests with values of the Max-Forwards HTTP header varying from 0 to 2 and checking for any anomalies in certain response values such as the status code, Server, Content-Type and...

Ubuntu Update for openssh vulnerability USN-597-1

Ubuntu Update for Linux kernel vulnerabilities USN-597-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5971.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssh vulnerability USN-597-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : openssh vulnerability (USN-597-1)

Timo Juhani Lindfors discovered that the OpenSSH client, when port forwarding was requested, would listen on any available address family. A local attacker could exploit this flaw on systems with IPv6 enabled to hijack connections, including X11 forwards. Note that Tenable Network Security has...

GLSA-200703-27 : Squid: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-27 Squid: Denial of Service Squid incorrectly handles TRACE requests that contain a 'Max-Forwards' header field with value '0' in the clientProcessRequest function. Impact : A remote attacker can send specially crafted TRAC...

CVE-2005-1318

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

[SA15082] Forwards Parent Frame Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Forwards Parent Frame Page Title Cross-Site Scripting...

CVE-2005-1318

The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...

Horde Forwards < 2.2.2 Parent Frame Page Title XSS

Binary data 2855.prm...