6610 matches found
UBUNTU-CVE-2014-3616
nginx 0.5.6 through 1.7.4, when using the same shared sslsessioncache or sslsessionticketkey for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks...
FreeBSD : nginx -- inject commands into SSL session vulnerability (77b784bb-3dc6-11e4-b191-f0def16c5c1b)
The nginx project reports : Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple 'server' blocks CVE-2014-3616. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
DLA-55-1 nginx - security update
Bulletin has no description...
nginx -- inject commands into SSL session vulnerability
The nginx project reports: Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple "server" blocks CVE-2014-3616...
nginx < 1.6.1 / 1.7.4 SMTP STARTTLS Command Injection
The version of nginx installed on the remote host is 1.5.6 or higher, 1.6.x prior to 1.6.1, or 1.7.x prior to 1.7.4. It is, therefore, affected by a command injection vulnerability. A flaw exists in the function 'ngxmailsmtpstarttls' within the file 'src/mail/ngxmailsmtphandler.c' whereby input t...
Mail.ru: Version Disclosure (NginX)
POC : url : https://calendar.mail.ru Open up your google chrome browser. Click right mouse button and choose Inspect Element. Put website url in address bar. https://calendar.mail.ru Now choose network option from Inspect Element menu. Response Headers Connection:close...
FreeBSD : nginx -- inject commands into SSL session vulnerability (ad747a01-1fee-11e4-8ff1-f0def16c5c1b)
"The nginx project reports : Security: pipelined commands were not discarded after STARTTLS command in SMTP proxy CVE-2014-3556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
Security fix for the ALT Linux 9 package nginx version 1.6.1-alt1
Aug. 6, 2014 Denis Smirnov 1.6.1-alt1 - 1.6.1 - CVE-2014-3556...
nginx -- inject commands into SSL session vulnerability
The nginx project reports: Security: pipelined commands were not discarded after STARTTLS command in SMTP proxy CVE-2014-3556; the bug had appeared in 1.5.6...
SkaDate Lite 2.0 - Multiple Cross-Site Request Forgery Persistent Cross-Site Scripting Vulnerabilities
SkaDate Lite 2.0 - Multiple Cross-Site Request Forgery Persistent Cross-Site Scripting Vulnerabilities !-- SkaDate Lite 2.0 Multiple XSRF And Persistent XSS Vulnerabilities Vendor: Skalfa LLC Product web page: http://lite.skadate.com | http://www.skalfa.com Affected version: 2.0 build 7651 Platfo...
SkaDate Lite 2.0 Multiple XSRF And Persistent XSS Vulnerabilities
Summary SkaDate Lite is a new platform that makes it easy to start online dating business in just a few easy steps. No programming or design knowledge is required. Install the solution, pick a template, and start driving traffic to your new online dating site. Description SkaDate Lite version 2.0...
SkaDate Lite 2.0 - Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities
SkaD...
PT-2014-11: Information Disclosure in nginx
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in nginx. URI normalization function does not properly handle the transmitted values, thus an attacker can disclose memory areas using a web server log. How to fix Update your sofware up to the...
Netsparker v3.5 - Web Application Security Scanner
Netsparker Web Application Security Scanner can find and report web application vulnerabilities such as SQL Injection and Cross-site Scripting XSS and security issues on all web applications and websites regardless of the platform and the technology they are built on. Netsparker is very easy to u...
Factlink: XSS 01 on staging.fct.li
hey the error message generated can be used to escape out of a dynamically generated href link. The below will render in internet explorer without xss filter enabled of course. See the screenshot for an example. The response is: HTTP/1.1 504 Gateway Time-out Server: nginx/1.4.4 Date: Wed, 02 Jul...
nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 - PoC
No description provided by source. debian: uname -a Linux debian 2.6.18-6-686 1 SMP Thu Aug 20 21:56:59 UTC 2009 i686 GNU/Linux debian: cat /etc/issue Debian GNU/Linux 4.0 \n \l debian: dpkg -l|grep nginx ii nginx 0.4.13-2+etch2 small, but very powerful and efficient debian: ps xauwww|grep...
Nginx <= 0.7.65 / 0.8.39 (dev) - Source Disclosure / Download Vulnerability
No description provided by source...
nginx 1.3.9/1.4.0 x86 - Brute Force Remote Exploit
No description provided by source. nginx 1.3.9/1.4.0 x86 brute force remote exploit copyright c 2013 kingcope ---------------------------- fix for internet exploitation, set MTU: ifconfig interface mtu 60000 up !!! WARNING !!! this exploit is unlikely to succeed when used against remote internet...
Nginx HTTP Server 1.3.9-1.4.0 - Chuncked Encoding Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4...