Lucene search
+L

4205 matches found

Saint
Saint
added 2009/01/28 12:00 a.m.22 views

E-mail attachment execution

Added: 01/28/2009 Background This tool sends an e-mail attachment which, when executed, establishes a command connection. Limitations This tool requires a user to execute the e-mail attachment in order to succeed. This tool requires the IP address of a working mail server which allows relaying of...

1.7AI score
SaveExploits0
Saint
Saint
added 2009/01/28 12:00 a.m.19 views

E-mail attachment execution

Added: 01/28/2009 Background This tool sends an e-mail attachment which, when executed, establishes a command connection. Limitations This tool requires a user to execute the e-mail attachment in order to succeed. This tool requires the IP address of a working mail server which allows relaying of...

1.7AI score
SaveExploits0
securityvulns
securityvulns
added 2009/01/16 12:00 a.m.79 views

PR08-19: XSS on Cisco IOS HTTP Server

PR08-19: XSS on Cisco IOS HTTP Server Date found: 1st August 2008 Vendor contacted: 1st August 2008 Advisory publicly released: 14th January 2009 Severity: Medium Credits: Adrian Pastor of ProCheckUp Ltd www.procheckup.com Description: Cisco IOS HTTP server is vulnerable to XSS within invalid...

4.3CVSS0.1AI score0.05449EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2009/01/08 12:00 a.m.22 views

Microsoft Windows Live Messenger Information Disclosure Vulnerability

This host has Windows Live Messenger Client installed and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmswinlivemessengerinfodisvuln.nasl 8193 2017-12-20 10:46:55Z cfischer $ Microsoft Windows Live Messenger Information Disclosure Vulnerability Authors:...

5CVSS6.5AI score0.143EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/01/06 5:00 p.m.30 views

CVE-2008-5849

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...

6.6AI score0.01618EPSS
SaveExploits2References7
Atlassian
Atlassian
added 2008/12/16 5:40 a.m.30 views

Get 500 when trying to communicate to confluence via trusted apps.

Steps to reproduce. 1 Install confluence 2.9.2 and crucible 1.6.5 2 Setup trusted apps to crucible specify a "IP address Matches as 10.0.100.123 3 Install the confluence crucible plugin...

0.3AI score
SaveExploits0Affected Software1
OSV
OSV
added 2008/12/09 12:30 a.m.12 views

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

6.4AI score
SaveExploits0References7
NVD
NVD
added 2008/12/09 12:30 a.m.25 views

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

9.3CVSS6.5AI score0.02036EPSS
SaveExploits0References7
Prion
Prion
added 2008/12/09 12:30 a.m.21 views

Code injection

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

9.3CVSS6.8AI score0.02036EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2008/12/09 12:00 a.m.64 views

CVE-2008-5398

CVE-2008-5398 affects Tor up to version before 0.2.0.32, where the ClientDNSRejectInternalAddresses option is not consistently enforced when an exit relay issues a policy-based stream refusal. This can allow remote exit relays to map an internal IP address to the destination hostname of the refus...

9.3CVSS6.3AI score0.02036EPSS
SaveExploits0References7Affected Software1
seebug.org
seebug.org
added 2008/12/09 12:00 a.m.27 views

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2008/11/21 12:00 a.m.47 views

3Com AP8760 authentication bypass

After initial password check autnentication is IP-address only...

3.3AI score
SaveExploits0References1
Nmap
Nmap
added 2008/11/06 2:52 a.m.425 views

upnp-info NSE Script

Attempts to extract system information from the UPnP service. Script Arguments upnp-info.override Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. slaxml.debug See t...

10CVSS9.3AI score0.99448EPSS
SaveExploits35
securityvulns
securityvulns
added 2008/11/04 12:00 a.m.125 views

A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2008/11/01 12:00 a.m.30 views

A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability

No description provided by source. Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected]...

7.1AI score
SaveExploits0
NVD
NVD
added 2008/10/22 12:11 a.m.29 views

CVE-2008-4644

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header...

7.5CVSS6.6AI score0.02647EPSS
SaveExploits1References5
CVE
CVE
added 2008/10/21 10:00 p.m.59 views

CVE-2008-4644

CVE-2008-4644 affects hits.php in the myWebland myStats component, where remote attackers can bypass IP address restrictions by tampering with the X-Forwarded-For HTTP header. The vulnerability is triggered by trusting a manipulated X-Forwarded-For value, allowing bypass of access controls intend...

7.5CVSS6.6AI score0.02647EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/10/17 12:00 a.m.28 views

openSUSE 10 Security Update : tomcat5 (tomcat5-5684)

This update of tomcat fixes an information leak due to incorrect IP address filtering. CVE-2008-3271 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tomcat5-5684. The text description of this...

4.3CVSS5.3AI score0.04807EPSS
SaveExploits2References1
seebug.org
seebug.org
added 2008/10/15 12:00 a.m.153 views

Apache Tomcat RemoteFilterValve绕过安全限制漏洞

BUGTRAQ ID: 31698br / CVECAN ID: CVE-2008-3271br / br / Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。br / br / Apache Tomcat在检查IP地址时存在同步问题,在极少的环境下,这可能允许非允许的IP地址绕过RemoteFilterValve过滤器值并访问受保护的内容。仅在使用调试器在两个线程之间强制特定的处理序列的情况下才可以利用这个漏洞。br / Apache Tomcat 5.5.0 Apache Tomcat 4.1.0 - 4.1.31 Apache ------...

4.3CVSS6.4AI score0.04807EPSS
SaveExploits2
NVD
NVD
added 2008/10/13 8:00 p.m.26 views

CVE-2008-3271

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

4.3CVSS6.1AI score0.04807EPSS
SaveExploits2References23
Rows per page
Query Builder