713 matches found
Legal Robot: Privilege Escalation to Admin-level Account
A security researcher discovered a potentially serious privilege escalation issue in our system which was ultimately traced to our use of the allow-deny package provided in the open source Meteor framework. We implemented a short-term fix using triggers - not great performance on the same day thi...
Cryptographically Insecure Token Generation
react-native-meteor-oauth generates insecure tokens. These tokens are insecure because they are generated using the randomatic package which is not cryptographically secure. This makes it easier for attackers to brute force tokens...
meteor.aihw.gov.au XSS vulnerability
Vulnerable URL: http://meteor.aihw.gov.au/content/index.phtml/itemId/237518?filter=1=10=all=any=any=Standard=meteorDataElement=meteorDss=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:|...
[SECURITY] Fedora 20 Update: rubygem-passenger-4.0.53-3.fc20
Phusion Passenger=C2=AE is a web server and application server, designed to be fast, robust and lightweight. It takes a lot of complexity out of deploying web a pps, adds powerful enterprise-grade features that are useful in production, and makes administration much easier and less complex. It...
Mozilla Defense Platform: MozDef
Mozilla Defense Platform The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders...
Meteor FTP Server v1.5 Buffer Overflow
The overflow is triggered once a series of commands have been issued with specific criteria. In theory, using the USER command followed by a large amount of data will result in memory corruption as we have seen previously. However, if the PASS and PORT command are also issued with the right...
Meteor FTP Server buffer overflow
Buffer overflow on oversized FTP command...
Remote denial of service vulnerability in Meteor FTP Version 1.5
www.evicted.org [email protected] August 8, 2003 Meteor FTP Version 1.5 Remote Denial of Service Vulnerability 1. Introduction ---------------- Meteor FTP is a personal ftp server that runs on Windows98/ME/2K/XP. 2. Vulnerability ----------------- A vulnerability exists in Meteor FTP Version 1.5...
Meteor FTP Server 1.2/1.5 - USER Memory Corruption
source: https://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash. Further reports indicate that this may...
Meteor FTP Server 1.21.5 - USER Memory Corruption
Meteor FTP Server 1.21.5 - USER Memory Corruption source: https://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server...
CVE-2001-1031
Technical details about CVE-2001-1031 are not publicly available in the provided documents. Monitor for updates from official advisories.
