3961 matches found
McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10181)
The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the web interface due to improper error reporting. An authenticated,...
McAfee Virus Scan Enterprise for Linux - Remote Code Execution Exploit
Exploit for linux platform in category remote exploits ''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens...
McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution
''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...
McAfee VirusScan for Linux contains multiple vulnerabilities
Overview McAfee VirusScan for Linux contains multiple vulnerabilities. Description McAfee VirusScan for Linux version 2.0.3 and prior is vulnerable to the following:CWE-200: Information Exposure - CVE-2016-8016 Multiple pages within the web interface utilize a tplt parameter. An authenticated...
Updated tomcat package fixes security vulnerabilities
The code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could...
Cisco Firepower Management Center Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...
Cisco Firepower Management Center Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...
squid security update
CentOS Errata and Security Advisory CESA-2016:2600 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 403 Forbidden (ZDM-certsrv/1.0 - 403 16)
XenMobile Client Certificate request responded with a HTTP Response 403 16 Forbidden by the issuing server IIS Log : 2016-10-11 14:42:18 10.1.1.51 POST /certsrv/certfnsh.asp - 443 - 192.168.100.100 ZDM-certsrv/1.0 - 403 16 2148204809 31...
Mail.ru: [qpt.mail.ru] CRLF Injection / Open Redirect
Уязвимый сценарий: /tests/ Уязвимый параметр: qptquestionurl Пример Open Redirect:...
Microsoft WININET.dll - CHttpHeaderParser::ParseStatusLine Out-of-Bounds Read (MS16-104MS16-105)
Microsoft WININET.dll - CHttpHeaderParser::ParseStatusLine Out-of-Bounds Read MS16-104MS16-105 !-- Source: http://blog.skylined.nl/20161110001.html Synopsis A specially crafted HTTP response can cause the CHttpHeaderParser::ParseStatusLine method in WININET to read data beyond the end of ...
RHEL 7 : squid (RHSA-2016:2600)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2600 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The following packages have...
Moderate: Red Hat Security Advisory: squid security, bug fix, and enhancement update
An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net
Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...
Mail.ru: [pokerist.mail.ru] XSS Request-URI
PoC FireFox: https://pokerist.mail.ru/%3Cscript%3Ealertdocument.domain%3C/script%3E https://pokerist.mail.ru/%3Csvg%20onload=alertdocument.domain%3E HTTP Response: html Error 404 Unable to resolve the request "alertdocument.domain". html Error 404 The system is unable to find the requested action...
IBM WebSphere Application Server 8.5 < 8.5.5.8 Multiple Vulnerabilities
Binary data 9718.prm...
IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)
Binary data 9700.prm...
IBM WebSphere Application Server 8.0 < 8.0.0.12 Multiple Vulnerabilities
Binary data 9714.prm...
Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 403 Forbidden
After configuring Client Certificate Authentication for XMS but the Client Certificate Request on the both the XMS and Issuing Server is returning a HTTP Response 403 Frobidden com.zenprise.zdm.pki.spi.IssuingServiceException: Could not sign CSR at...
CVE-2016-5325
CRLF injection vulnerability in the ServerResponsewriteHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument...