CVE-2016-1288: Improper Input Validation

The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service service outage by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840...

PT-2016-4685

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions prior to 8.5.3-051 Cisco Web Security Appliance WSA versions 9.x prior to 9.0.0-485 Description The issue allows remote attackers to cause a denial of service by sending a malformed HTTPS request,...

CVE-2 0 1 6-0 7 0 3 OpenSSL DROWN vulnerability security notification-vulnerability warning-the black bar safety net

In OpenSSL official yesterday released the security Bulletin, discloses a new high-risk vulnerabilities“DROWN”the drowned vulnerability,。 Through this vulnerability, an attacker can initiate a“man in the middle hijacking attack”to steal is HTTPS encrypted session content, including Yahoo!, Alibab...

acea.net XSS vulnerability

Vulnerable URL: http://www.acea.net/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 01:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

DROWN Flaw Opens 33 Percent Of HTTPS Connections To Attack

Researchers revealed a massive transport layer security TLS vulnerability today that leaves millions of Internet users vulnerable to an attack that could expose passwords, credit card numbers and financial data. OpenSSL and others are urging companies to patch their web servers or risk exposure t...

DROWN Attack — More than 11 Million OpenSSL HTTPS Websites at Risk

A new deadly security vulnerability has been discovered in OpenSSL that affects more than 11 Million modern websites and e-mail services protected by an ancient, long deprecated transport layer security protocol, Secure Sockets Layer SSLv2. Dubbed DROWN, the highly critical security hole in OpenS...

Cisco IOS XE Multiple OpenSSL Vulnerabilities (CSCup22487)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and its web user interface is configured to use HTTPS. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - An error exists in the ssl3readbytes function that could allow data to ...

model-trains-universe.com Open Redirect vulnerability

Vulnerable URL: http://www.model-trains-universe.com/adserver/www/delivery/ck.php?oaparams=2bannerid=58zoneid=5cb=00cb6d34edoadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:|...

Kaspersky Internet Security HTTPS Inspection Insecure Certificate Validation

A code execution vulnerability has been reported in Kaspersky Internet Security. This vulnerability is due to improper validation of a temporary certificate name. A remote, unauthenticated attacker can exploit this vulnerability by sending the user a crafted certificate, potentially leading to a...

Self Hosted Git Service: Gogs

Gogs is a self-hosted Git service written in Go which is very easy to get running and has low system usage as well. It aspires to be the easiest, fastest, and most painless way to set up a self-hosted Git service. With Go, this can be done with an independent binary distribution across ALL...

Gratipay: stop serving grtp.co over HTTP

Target Domain: grtp.co 1 Issue Details: Service available on HTTP As per the policy details under scope on HackerOne portalhttps://hackerone.com/gratipay, the 'grtp.co'. should be available only on port 443 or HTTPS protocol. However grtp.co service is running on port 80 too i.e., running on HTTP...

Logstash 2.2.1 Elasticsearch Output Vulnerability

Logstash version 2.2.1 is vulnerable to a man in the middle attack when used with Elasticsearch output. In version 2.2.1, the config which enables SSL/TLS default has been disabled inadvertently, so a malicious user could access payload data sent via HTTP during the initial handshake. This has be...

brightemailmarketing.com Open Redirect vulnerability

Vulnerable URL: http://www.brightemailmarketing.com/ops/EPassLink.asp?EID=200941512400=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 22979552...

Apache Subversion Certificate Validation Information Disclosure Vulnerability

Apache Subversion is prone to certificate validation information disclosure vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

neighborhoodimage.com Open Redirect vulnerability

Vulnerable URL: http://www.neighborhoodimage.com/adserver/www/delivery/ck.php?oaparams=2bannerid=361zoneid=1cb=01084b1e8doadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:|...

museumvictoria.com.au XSS vulnerability

Vulnerable URL: http://museumvictoria.com.au/melbournemuseum/search/?q=%3Cscript%3Ealert%28/xssposed/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

OpenSSL high-risk vulnerabilities allow attackers to decrypt HTTPS traffic-bug warning-the black bar safety net

OpenSSL maintainer to fix a high risk vulnerability allows an attacker can obtain the decryption of HTTPS and other encrypted traffic key. Vulnerability the potential impact of While serious, but the need to meet multiple criteria to be used: the vulnerability exists only in OpenSSL 1.0.2; rely o...

Mozilla Firefox Man-in-the-Middle Attack Vulnerability (CNVD-2016-00851)

Mozilla Firefox on Android is an open source web browser for the Android platform. Mozilla Firefox on Android fails to ensure that lightweight themes are installed using HTTPS, allowing remote attackers to perform man-in-the-middle attacks by modifying client-server data streams, changing theme...

cs.odu.edu XSS vulnerability

Vulnerable URL: http://www.cs.odu.edu/mln/teaching/cs791-s04/?method=display=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

OpenSSL high-risk vulnerabilities allow hackers to decrypt HTTPS traffic（CVE-2 0 1 6-0 7 0 1-a vulnerability warning-the black bar safety net

! The OpenSSL encryption code library defenders are declared fixes a high risk vulnerability. The vulnerability could allow a hacker to access in HTTPS and other secure transport layer, for the encrypted communication to decrypt the key. OpenSSL vulnerability details When various conditions are...