McAfee Web Gateway 7.1.5.x - 'Host' HTTP Header Security Bypass

source: https://www.securityfocus.com/bid/53015/info McAfee Web Gateway is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules. A successful attack will allow an attacker to bypass intended security restrictions; this may aid in other attacks. McAfee Web...

httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix

The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...

Apache Patch released for Reverse proxy Bypass Vulnerability

Apache Patch released forReverse proxy Bypass Vulnerability Security experts at Context have discovered a hole in the Apache web server that allows remote attackers to access internal servers. Security experts are warning firms running the Apache web server to keep up to date with the latest...

DNS Reverse Download and Exec Shellcode

DNS Reverse Download and Exec Shellcode. Shellcode exploit for windows platform Shellcode: download and execute file via reverse DNS channel Features: Windows 7 tested UAC without work svchost.exe makes requests via getaddrinfo Firewall/Router/Nat/Proxy bypass reverse connection like dnscat do, b...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2009:209)

Multiple Java OpenJDK security vulnerabilities has been identified and fixed : The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation specifies an HMAC truncation length HMACOutputLength but does not require a minimum for its length, which allows attackers to spoof...

Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000

SEC Consult Security Advisory 20090429-0 ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600...

LevelOne AMG-2000 Wireless AP Proxy Bypass

SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...

PHPSlash 0.8.1.1 - Remote Code Execution

PHPSlash 0.8.1.1 - Remote Code Execution !/usr/bin/php -q agent 'Mozilla Firefox' ; // Hey ya : head; // Target $url = getp 'url', true ; // Proxy options $prh = getp 'proxhost' ; $pra = getp 'proxauth' ; // Use a proxy ? if $prh // host:ip $web-proxy $prh ; // Authentication if $pra $web-proxyau...

Kerio WinRoute防火墙未明代理验证绕过漏洞

Kerio WinRoute Firewall是一款商业性质的防火墙应用程序。 Kerio WinRoute Firewall存在未明安全问题，本地攻击者可以利用漏洞绕过代理验证，未授权访问受限资源。 目前没有详细漏洞细节提供。 Kerio WinRoute Firewall 6.2.3 Kerio WinRoute Firewall 6.2.2 Kerio WinRoute Firewall 6.2.1 Kerio WinRoute Firewall 6.2 Kerio WinRoute Firewall 6.1.4 Patch 2 Kerio WinRoute Firewall...

phpfusion600306-2.txt

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

Frox transparent FTP proxy protection bypass

Deny ACLs may not work properly...

smb2www Proxy Bypass

The remote host is running smb2www - a SMB to WWW gateway. An attacker may use this CGI to use this host as a proxy - The attacker can then connect to a third-party SMB host without revealing an IP address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...