5935 matches found
Man-in-the-Middle (MitM)
settingslogic is vulnerable to man in the middle MitM attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...
Man In The Middle (MitM)
delayedjob is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists due to the use of the deprecated :rubygems option in the Gemfile, causing insecure HTTP requests to be made. A malicious user can potentially compromise the download to conduct MitM attacks...
VegaDNS axfr_get.php Command Injection
A command injection vulnerability exists in the axfrget.php script of VegaDNS. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the target server. Successful exploitation could allow the attacker to execute arbitrary commands...
Man In The Middle (mitm)
roodi is vulnerable to man-in-the-middle MitM attacks. The rubgems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...
Man In The Middle (mitm)
json-schema is vulnerable to man-in-the-middle MitM attacks. The rubgems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...
Man In The Middle (mitm)
wdm is vulnerable to man-in-the-middle MitM attacks. The rubgems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...
Man-In-The-Middle (MitM)
thriftclient is vulnerable to man in the middle attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct man-in-the-middle attacks...
Man In The Middle (MitM)
appraisal is vulnerable to Man in the Middle MitM attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct man-in-the-middle attacks...
Man In The Middle (mitm)
simpleoauth is vulnerable to man-in-the-middle MitM attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...
Man In The Middle (Mitm)
bourne is vulnerable to man-in-the-middle MitM attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct man-in-the-middle attacks...
Splunk Enterprise SSRF Vulnerability (SP-CAAAPSR)
Splunk Enterprise is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Malware exploit: Vertexnet V1.1.1
Type: Flood Bots Author: Xylitol !/usr/bin/perl VertexNet v1.1.1 Flood Bots http://www.virustotal.com/file-scan/report.html?id=fd373a8f4adf29001d282b963f126f760afcf3e58117f6024b2d65a36d41f617-1305491791 Xyl2k! :þ use HTTP::Request; use LWP::UserAgent; $URL = "http://localhost/Panel/adduser.php";...
DSA-3733-1 apt - security update
Bulletin has no description...
BP Profile Search <= 4.5.3 - PHP Object Injection
The plugin bp-profile-search insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. This vulnerability was patched in version 4.6, information is being released now as a disclosure period has expired...
Red Hat JBoss EAP - Deserialization of Untrusted Data
Red Hat JBoss EAP - Deserialization of Untrusted Data Security Advisory @ Mediaservice.net Srl 05, 23/11/2016 Data Security Division Title: Red Hat JBoss EAP deserialization of untrusted data Application: JBoss EAP 5.2.X and prior versions Description: The application server deserializes untruste...
Red Hat JBoss EAP - Deserialization of Untrusted Data
Security Advisory @ Mediaservice.net Srl 05, 23/11/2016 Data Security Division Title: Red Hat JBoss EAP deserialization of untrusted data Application: JBoss EAP 5.2.X and prior versions Description: The application server deserializes untrusted data via the JMX Invoker Servlet. This can lead to a...
slowloris - Low bandwidth DoS tool
Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We never close the connection unless the server does so. If the...
Atlassian Crucible Server < 3.10.0 Multiple Vulnerabilities
Binary data 9782.prm...
WININET CHttpHeaderParser::ParseStatusLine Out-Of-Bounds Read
Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the eight entry in that series, although this particular vulnerability does not just affect web-browsers, but all applications that use WININET to make HTTP requests...