876 matches found
389-ds-base security and bug fix update
1.3.5.10-20 - Bump version to 1.3.5.10-20 - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages 1.3.5.10-19 - Release 1.3.5.10-19 - Resolves: bug 1429495 - ns-slapd dies under heavy load - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsro...
LLMNR NBT-NS MDNS Poisoner: Responder
LLMNR NBT-NS MDNS Poisoner: Responder Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. This tool is an LLMNR, NBT-NS and MDNS responder, it will...
ns-sirius.com XSS vulnerability
Vulnerable URL: http://www.ns-sirius.com/products.php?plevel=2&pmid1;=1&pmid2;=27%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7710944...
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean
Recently, I found that Digital Ocean suffered from a security vulnerability in their domain import system which allowed for the takeover of 20K domain names. If you haven’t given that post a read I recommend doing so before going through this write up. Originally I had assumed that this issue was...
LLMNR, NBT-NS and MDNS Responder for Windows
LLMNR, NBT-NS and MDNS Responder for Windows This tool is first an LLMNR, NBT-NS and MDNS responder, it will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see: http://support.microsoft.com/kb/163409 . By default, the tool will only answers to File Server Servic...
DEBIAN-CVE-2016-5277
Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging improper interaction between...
UBUNTU-CVE-2016-5278
Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...
UBUNTU-CVE-2016-5263
The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...
BadTunnel: Cross-Segment hijacking the broadcast Protocol-vulnerability warning-the black bar safety net
! 0x00 introduction This paper proposes a new attack model, can cross network segment hijacking the TCP/IP broadcast Protocol, we named it“BadTunnel” in. Using this method, you can achieve cross-subnet NetBIOS Name Service Spoofing attacks. Both the attacker and the user are in the same network...
NS International - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NS International published at the 'play' market has multiple vulnerabilities...
NS Reisplanner Xtra - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NS Reisplanner Xtra published at the 'play' market has multiple vulnerabilities...
网康 NS-ASG 6.2 用安全网关 /admin/cert_download.php 任意 文件下载
No description provided by source...
网康 NS-ASG /admin/export_log.php type参数存在越权日志下载
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /protocol/iscdevicestatus/getsysdatetime.php 命令执行漏洞
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /debug/list_logfile.php 任意文件删除&任意命令执行漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
NS-ASG 应用安全网关 resetpwd.php等10处 SQL注入漏洞
No description provided by source...