CVE-2015-8240

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

APITest.IO: Clickjacking: X-Frame-Options header missing

same as this report https://hackerone.com/reports/7492 vulnerable :- sign in ,sign up ,and main domain poc attached...

CVE-2016-0734

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

Design/Logic Flaw

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

Binary Options Trading Signals - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Binary Options Trading Signals published at the 'play' market has multiple vulnerabilities...

Binary Options - anyoption - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Binary Options - anyoption published at the 'play' market has multiple vulnerabilities...

$10,000 Binary Options Demo - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application $10,000 Binary Options Demo published at the 'play' market has multiple vulnerabilities...

mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options...

Fedora 22 : php-pecl-http-2.5.6-1.fc22 (2016-bb7bdd7063)

Version 2.5.6 Fix php-bug php71719: Buffer overflow in HTTP url parsing functions Mike, rc0r Fix gh-issue 28: Possible NULL pointer dereference in phphttpurlmod rc0r Fix gh-issue 22: Fix PHP5 config.w32 Jan Ehrhardt - Fix gh-issue 20: setSslOptions notice with curl 7.43 Mike, Vitaliy Demidov Note...

Apache ActiveMQ Web Console Missing X-Frame-Options Clickjacking

The version of Apache ActiveMQ running on the remote host is affected by a clickjacking vulnerability in the web-based administration console due to not setting the X-Frame-Options header in HTTP responses. A remote attacker can exploit this to trick a user into executing administrative tasks. No...

Gratipay: Vulnerable to clickjacking

Reproduction steps: 1.Open URL :https://grtp.co/ 2.put the url in the below code of iframe Clickjacking GRTP Website is vulnerable to clickjacking! 3.Observe that site is getting displayed in Iframe Impact: By using Clickjacking technique, an attacker hijack's click's meant for one page and route...

New Relic: newrelic.com vulnerable to clickjacking !

Hello Security, Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking contro...

Apache ActiveMQ Web Console Single Click Hijacking Vulnerability

Apache ActiveMQ is a popular messaging and integration model provider . A security vulnerability exists in Apache ActiveMQ 5.0.0 - 5.13.1 due to an unset X-Frame-Options header for HTTP responses in the Web Management Console. This allows attackers to perform unauthorized operations in the consol...

Debian DSA-3517-1 : exim4 - security update

A local root privilege escalation vulnerability was found in Exim, Debian's default mail transfer agent, in configurations using the'perlstartup' option Only Exim via exim4-daemon-heavy enables Perl support. To address the vulnerability, updated Exim versions clean the complete execution...

[SECURITY] [DSA 3517-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3517-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2016 https://www.debian.org/security/faq -...

Testing TLS/SSL encryption: testssl.sh

testssl.sh is a free command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It’s designed to provide clear output in any case. Testing TLS/SSL encryption: testssl.sh Key features Clear output: you can tell...

LeaseWeb: Found clickjacking vulnerability

Hello Security, Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking contro...

Gratipay: X-Content-Type Header Missing For aspen.io

The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared...

Core FTP Server 1.2 - Buffer Overflow (PoC)

Exploit for windows platform in category local exploits -- coding: utf-8 -- Exploit Title : Core FTP Server v1.2 - BufferOverflow POC Date: 2016-02-22 Author: INSECT.B Facebook : https://www.facebook.com/B.INSECT00 GitHub : binsect00 Blog : http://binsect00.tistory.com Vendor Homepage :...

Security Advisory 0017

Security Advisory 0017 PDF Date: October 31st, 2017 Version: 1.6 Revision | Date | Changes ---|---|--- 1.0 | February 16th, 2016 | Initial release 1.1 | February 19th, 2016 | Updates include assessment and mitigation 1.2 | February 25th, 2016 | Updates include options for mitigation and protectio...