7687 matches found
Bash environment variable command injection in Cisco UCS Manager
Added: 03/24/2016 CVE: CVE-2014-6278 BID: 70166 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. Cisco UCS Manager is a product for management of Cisco UCS and Cisco HyperFlex infrastructure. Problem The Bash shell executes commands injected after...
Gratipay: Hijacking user session by forcing the use of invalid HTTPs Certificate on images.gratipay.com
I found that the domain images.gratipay.com is just a reverse proxy for gratipay.com and HTTPS works throughtout the site flawlessly except in one case, that it when we try to open user's profile: POC: https://images.gratipay.com/asdlfz/ Https Warning Page: http://i.imgur.com/XHsXJEvr.png?1 Risks...
Google Debuts New Untrusted CA Log Submariner
Google wants the internet to know that it’s keeping track of deployed certificates, whether they’re trusted or not. While the search behemoth has long maintained a list of trusted Certificate Authorities, it announced on Monday that it has created a new list of CAs that were once, or are not yet...
Cisco ASA 5500 Devices DoS Vulnerability (cisco-sa-20160309-csc)
Cisco ASA 5500 devices are prone to a denial of service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
New Relic: Insecure transition from HTTP to HTTPS in form post
Vulnerability description:- This form is served from an insecure page http page. This page could be hijacked using a Man-in-the-middle attack and an attacker can replace the form target. This vulnerability affects:- /selfies/submit. attack details:- Form name: "form144" Form action:...
Gratipay: Cookie Does Not Contain The "secure" Attribute
Poc : https://gratipay.com/ -- optimizelyBuckets=%7B%7D; expires=Sat Mar 14 21:28:25 2026; path=/; domain=.gratipay.com; max-age=315359448,https://gratipay.com/ -- optimizelyEndUserId=oeu1458188905178r0.282567850779742; expires=Sat Mar 14 21:28:25 2026; path=/; domain=.gratipay.com;...
CVE-2016-1731
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream...
Design/Logic Flaw
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream...
CVE-2016-1731
The CVE-2016-1731 vulnerability affects Apple Software Update on Windows versions prior to 2.2. The issue arises because the update contents are retrieved over HTTP instead of HTTPS, enabling a man-in-the-middle to modify the data stream and spoof updates. Public sources in the provided documents...
CVE-2016-1731
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream...
Suspicious HTTPS YAHOO Mail Attachment Containing JavaScript Code
Many phishing campaigns are known to use mail attachments containing JavaScript code. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method is often use...
Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code
Many phishing campaigns are known to use mail attachments containing JavaScript code. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method is often use...
Cisco ASA 5500 Content Security and Control Security Services Module Denial of Service Vulnerability
The Cisco ASA 5500 is an X-Series next-generation firewall security appliance from Cisco, Inc.The Content Security and Control Security Services Module CSC-SSM is one of the content security and control security services modules. A security vulnerability exists in the HTTPS inspection engine in...
Design/Logic Flaw
The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...
CVE-2016-1312
The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...
CVE-2016-1312
The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...
CVE-2016-1312
The CVE-2016-1312 issue affects Cisco ASA 5500-series devices with the Content Security and Control Security Services Module (CSC-SSM) HTTPS inspection engine. The vulnerability is due to improper handling of a high rate of HTTPS packets, enabling an unauthenticated, remote attacker to cause memo...
Cisco ASA Content Security and Control Security Services Module Denial of Service Vulnerability
A vulnerability in the HTTPS inspection engine of the Cisco ASA Content Security and Control Security Services Module CSC-SSM could allow an unauthenticated, remote attacker to cause exhaustion of available memory, system instability, and a reload of the affected system. The vulnerability is due ...
tc.airfrance.com Open Redirect vulnerability
Vulnerable URL: http://tc.airfrance.com/c/?tcs=324=localdeals=travelzoo=wowtnr=ca Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...
CVE-2016-0125
Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...