http-waf-detect NSE Script

Attempts to determine whether a web server is protected by an IPS Intrusion Prevention System, IDS Intrusion Detection System or WAF Web Application Firewall by probing the web server with malicious payloads and detecting changes in the response code and body. To do this the script will send a...

Report: Web Applications Attacked Every Two Minutes

Web applications are attacked every two minutes and at some times can experience upwards to 25,000 attacks an hour according to a report published by security firm Imperva today. As part of its continuing Hacker Intelligence initiative, Imperva’s Application Defense Center ADC released their Web...

Image of the Day: SEO Poisoning

Today’s Image of the Day comes from web security firm Imperva, who’ve crafted an infographic to accompany their monthly Hacker Intelligence Initiative report on search engine poisoning SEP. We’ve seen before how attackers continue to poison SEO to thwart search engine algorithms. To increase thei...

CVE-2011-0767

Cross-site scripting XSS vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759...

Cross site scripting

Cross-site scripting XSS vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759...

CVE-2011-0767

The CVE-2011-0767 vulnerability affects Imperva SecureSphere Web Application Firewall, specifically the management GUI in MX Management Server across versions 6.2, 7.x, and 8.x. Root cause: improper validation/sanitization of user-controlled input stored and later returned to the administrator in...

CVE-2011-0767

Cross-site scripting XSS vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759...

Imperva SecureSphere management GUI contains an XSS vulnerability

Overview An XSS vulnerability exists in the Imperva SecureSphere management GUI. Description Dell SecureWorks' SWRX-2011-001 advisory states:"A vulnerability exists in Imperva SecureSphere due to improper validation of user-controlled input. User-controllable input is not properly sanitized for...

Imperva SecureSphere - SQL Query Filter Security Bypass

source: https://www.securityfocus.com/bid/47780/info Imperva SecureSphere is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions. Successful exploits may allow attackers to exploit SQL-injection vulnerabilities. 15 and...

Imperva SecureSphere - SQL Query Filter Security Bypass

Imperva SecureSphere - SQL Query Filter Security Bypass source: https://www.securityfocus.com/bid/47780/info Imperva SecureSphere is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions. Successful exploits may allow attacke...

Imperva SecureSphere SQL Injection Filter Bypass

======================================================================= Imperva SecureSphere - SQL injection filter bypass ======================================================================= Affected Software : SecureSphere Web Application Firewall WAF Severity : High Local/Remote : Remote...

[SECURITY] CVE-2011-0533: Apache Continuum cross-site scripting vulnerability

CVE-2011-0533: Apache Continuum cross-site scripting vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Continuum 1.3.6 Continuum 1.4.0 Beta The unsupported versions Continuum 1.1 - 1.2.3.1 are also affected. Description: A request that included a speciall...

Government, Military Sites Hacked, Data and Access for Sale

The Web site of the U.S. military’s Communications-Electronics Command CECOM was off line on Monday after reports that access to the site was among those being fenced by hackers in an underground forum. The CECOM home page, cecom.army.mil displayed a message saying the site was “temporarily...

Top 10 IT Security Trends for 2011

The crystal ball gazing has started early this year. Typically, tech prediction pieces emerge after Christmas, but the first 'security trends for 2011' missive has already dropped into my inbox. So, what does the somewhat premature Imperva Application Defense Center think will worry us the most o...

Imperva SecureSphere Web Application Firewall protection bypass

No description provided...

Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability

CSS10-01: Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability April 5, 2010 BACKGROUND ========== The Imperva SecureSphere Web Application Firewall protects web applications and sensitive data against sophisticated attacks and brute force attacks, stops online...

Design/Logic Flaw

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...

CVE-2010-1329

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...

CVE-2010-1329

CVE-2010-1329 affects Imperva SecureSphere Web Application Firewall and Database Firewall, with vulnerable versions ranging from 5.0.0.5082 to 7.0.0.7078. The issue allows remote attackers to bypass intrusion-prevention functionality by sending a request that includes an appended long string cont...

CVE-2010-1329

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...