4386 matches found
CGI web servers assign Proxy header values from client requests to internal HTTP_PROXY environment variables
Overview Web servers running in a CGI or CGI-like context may assign client request Proxy header values to internal HTTPPROXY environment variables. This vulnerability can be leveraged to conduct man-in-the-middle MITM attacks on internal subrequests or to direct the server to initiate connection...
cURL >= 7.21.0 and < 7.49.0 MitM Spoofing
Binary data 802007.prm...
PHP 5.5.x < 5.5.37 / 5.6.x < 5.6.23 / 7.0.x < 7.0.8 Multiple Vulnerabilities
Binary data 9393.prm...
OpenSSL 1.0.1 < 1.0.1t / 1.0.2 < 1.0.2h Multiple Vulnerabilities
Binary data 9390.prm...
Uber: faspex.uber.com uses an invalid SSL certificate
The SSL certificate deployed on faspex.uber.com was originally issued for faspex.ubersp.com. This means the certificate is invalid for that domain and when loaded will display an error in the user's browser. Since this is an uber internal page, uber employees are most likely getting used to...
LocalTapiola: Mixed Active Scripting Issue on https://www.lahitapiola.fi
HTTPS security issue - compromises HTTPS security by loading images from non secure source in https://www.lahitapiola.fi/henkilo/asiakaspalvelu/asioi-verkossa/kirjaudu-verkkoon Vulnerability Type: Mixed Active Scripting Issue Description: Mixed Active Content is content that has access to and can...
Debian DLA-522-1 : python2.7 security update
CVE-2016-0772 A vulnerability in smtplib allowing MITM attacker to perform a startTLS stripping attack. smtplib does not seem to raise an exception when the remote end smtp server is capable of negotiating starttls but fails to respond with 220 ok to an explicit call of SMTP.starttls. This may...
The vulnerability of Google Chrome’s browser allows a hacker to replace the chrome_cleanup_tool.exe file.
The vulnerability in the Google Chrome browser’s browser/safebrowsing/srtfieldtrialwin.cc component does not use HTTPS protocol for the dl.google.com service when the Software Removal Tool is executed. Exploiting this vulnerability allows a malicious actor to replace the chromecleanuptool.exe fil...
Internet Bug Bounty: CVE-2016-0772 - python: smtplib StartTLS stripping attack
python smtplib starttls stripping attack affects: basically all versions of smtplib with starttls support and projects relying on it python 2.7.2 - 2.7.11 dates back 14 years python 3.0 - 3.5.1 dates back 7 years Python's implementation of smtplib fails to raise an exception upon an unexpected...
Python -- smtplib StartTLS stripping vulnerability
Red Hat reports: A vulnerability in smtplib allowing MITM attacker to perform a startTLS stripping attack. smtplib does not seem to raise an exception when the remote end smtp server is capable of negotiating starttls but fails to respond with 220 ok to an explicit call of SMTP.starttls. This may...
OpenSSL AES-NI Padding Oracle MitM Information Disclosure
The remote host is affected by a man-in-the-middle MitM information disclosure vulnerability due to an error in the implementation of ciphersuites that use AES in CBC mode with HMAC-SHA1 or HMAC-SHA256. The implementation is specially written to use the AES acceleration available in x86/amd64...
Mitsubishi Outlander Car's Theft Alarm Hacked through Wi-Fi
From GPS system to satellite radio to wireless locks, today vehicles are more connected to networks than ever, and so they are more hackable than ever. It is not new for security researchers to hack connected cars. Latest in the series of hackable connected cars is the Mitsubishi Outlander plug-i...
CVE-2016-1693
browser/safebrowsing/srtfieldtrialwin.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chromecleanuptool.exe aka CCT file via a man-in-the-middle attack on an HTTP session...
OpenSSL CVE-2 0 1 6-2 1 0 7 vulnerability still affects many of the Alexa top sites-vulnerability warning-the black bar safety net
! According to security firm High-Tech Bridge said,Alexa ranking in the top 1 0 0 0 0 the site has many remains of the OpenSSL CVE-2 0 1 6-2 1 0 7 vulnerability. CVE-2 0 1 6-2 1 0 7 vulnerabilities for open-source cryptographic libraries the impact may be used to conduct MiTM attack. For as long ...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
MariaDB Man-in-the-Middle Attack Vulnerability (Jun 2016) - Linux
MariaDB is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...
CVE-2016-0907
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...