CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

Cross-Site Scripting (XSS)

airflow is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the insecure headers endpoint, allowing the attacker to get the authproxy cookie to use for authentication to other internal services...

U.S. Dept Of Defense: SSRF in ███████

Summary: Server-Side Request Forgery SSRF vulnerability in the ██████. Description: By sending a specially crafted HTTP request, I can forcibly send a URL request from SSI server. When sending the following HTTP request, access from the SSI server was logged on my server. Request: http GET...

CVE-2016-9204

A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...

vBulletin 5.2.2 - Server-Side Request Forgery

vBulletin 5.2.2 - Server-Side Request Forgery ''' ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-6483 - Release date: 05.08.2016 - Severity: High ============================================= I...

vBulletin 5.2.2 - Unauthenticated Server Side Request Forgery

Exploit for php platform in category web applications ''' ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-6483 - Release date: 05.08.2016 - Severity: High ============================================= I...

vBulletin 5.2.2 / 4.2.3 / 3.8.9 Server Side Request Forgery

============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-6483 - Release date: 05.08.2016 - Severity: High ============================================= I. VULNERABILITY ------------------------- vBulletin = 5.2....

Dropbox: SSRF allows access to internal services like Ganglia

ACLs to prevent the webhook testing service from accessing internal addresses were not applied to a newly added subnet. Only read-only monitoring services were identified, and requests were limited to GET. This subnet was not yet serving production traffic...

APITest.IO: SSRF on testing endpoint

Synopsis The form at https://www.apitest.io/request accepts among others the "url" parameter. This feature allows to reach internal services like the OpenStack metadata server or services running on loopback. Identified services http://0x7f.1/ nginx = "If you see this page, the nginx web server i...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to obtain information about the accessibility of internal network services.

The vulnerability of the SAP NetWeaver integration platform exists due to insufficient restrictions on access to the tcmonitoringwebserviceweb service. Exploiting this vulnerability allows a malicious actor to obtain information about the availability of internal network services through a...

Cisco TelePresence TC and TE Software Multiple Vulnerabilities (cisco-sa-20150513-tc)

The version of Cisco TelePresence TC or TE software running on the remote device is affected by one or more of the following vulnerabilities : - A implementation flaw exists in the authentication and authorization controls for internal services. An unauthenticated attacker, within the broadcast o...

Web Server Reverse Proxy Detection

The remote web server seems to allow any anonymous user to use it as a reverse proxy. This may expose internal services to potential mapping and, henceforth, compromise. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid12225; scriptversion "$Revision: 1.16 $";...

CVE-2001-0309

CVE-2001-0309 concerns the Red Hat 6.2 inetd server. The vulnerability is a bug where inetd does not properly close sockets for internal services (chargen, daytime, echo, etc.), allowing a remote attacker to cause a denial of service by issuing a series of connections to these internal services. ...

[RHSA-2001:006-03] Updated inetd packages available for Red Hat Linux 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated inetd packages available for Red Hat Linux 6.2 Advisory ID: RHSA-2001:006-03 Issue date: 2001-01-25 Updated on: 2001-01-30 Product: Red Hat Linux Keywords: inetd close...