CVE-2014-9044: Exposure of Sensitive Information to an Unauthorized Actor

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...

iPass Open Mobile Windows Client Remote Code Execution Vulnerability

iPass Open Mobile is a quick and easy way for you to use your device to connect to over a million enabled WIFIs around the world. A security vulnerability exists in the iPass Open Mobile client that allows attackers to register arbitrary DLLs via UNC shared pathnames by sending specially crafted...

Local Path Disclosure when using Asset Pipeline - ownCloud

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

Server: Local Path Disclosure when using Asset Pipeline

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

pycadf: token leak to message queue

It was found that authentication tokens were not properly sanitized from the message queue by the notifier middleware. An attacker with read access to the message queue could possibly use this flaw to intercept an authentication token and gain elevated privileges. Note that all services using the...

SCT Campus Pipeline 1.0/2.x/3.x Email Attachment Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10154/info It has been reported that Campus Pipeline is prone to a remote email attachment script injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied HTML and scri...

Lucent Ascend MAX <= 5.0/Pipeline <= 6.0/TNT 1.0/2.0 Router MAX UDP Port 9 Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially...

Lucent Ascend MAX <= 5.0/Pipeline <= 6.0/TNT 1.0/2.0 Router MAX UDP Port 9 Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially...

SCT Campus Pipeline 1.0/2.x/3.x Render.UserLayoutRootNode.uP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11392/info Campus Pipeline is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to...

CVE-2013-5959

Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service memory consumption and dropped connections via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests...

CVE-2013-5959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service memory consumption and dropped connections via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests...

PT-2013-5883

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 6.2.14.1 Blue Coat ProxySG version 6.3.x Blue Coat ProxySG version 6.4.x Blue Coat ProxySG versions prior to 6.5.2 Description The issue allows remote attackers to cause a denial of service, resulting in...

Cyber Attacks on gas pipeline linked to China

Cyber Attacks on gas pipeline linked to China The spear-phishing attacks laying siege to networks in the natural gas pipeline industry apparently are being carried out by the same group that hacked RSA security last year. The attacks, which have been occurring since late this past March, have...

Nmap NSE net: http-favicon

Gets the favicon 'favorites icon' from a web page and matches it against a database of the icons of known web applications. If there is a match, the name of the application is printed; otherwise the MD5 hash of the icon data is printed. If the script argument 'favicon.uri' is given, that relative...

Nmap NSE net: http-methods

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. Optionally tests each method individually to see if they are subject to e.g. IP address restrictions. In this script, 'potentially risky' methods are anything except GET, HEAD,...

Nmap NSE net: http-date

Gets the date from HTTP-like services. Also prints how much the date differs from local time. Local time is the time the HTTP request was sent, so the difference includes at least the duration of one RTT. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll be pipeline...

Nmap NSE net: http-userdir-enum

Attempts to enumerate valid usernames on web servers running with the moduserdir module or similar enabled. The Apache moduserdir module allows user-specific directories to be accessed using the http://example.com/user/ syntax. This script makes http requests in order to discover valid user-...

Nmap NSE net: http-php-version

Attempts to retrieve the PHP version from a web server. PHP has a number of magic queries that return images or text that can vary with the PHP version. This script uses the following queries: '/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42': gets a GIF logo, which changes on April Fool's Day...

Nmap NSE net: http-malware-host

Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: http://blog.unmaskparasites.com/2009/09/11/dynamic-dns-and-botnet-of-zombie-web-servers/. This is done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 it...

Nmap NSE net: http-domino-enum-passwords

Attempts to enumerate the hashed Domino Internet Passwords that are by default accessible by all authenticated users. This script can also download any Domino ID Files attached to the Person document. SYNTAX: domino-enum-passwords.idpath: the path where downloaded ID files should be saved If not...