9116 matches found
Simple Machines Forum (SMF) < 2.0.16 Reverse Tabnabbing Vulnerability
Simple Machine Forum SMF is prone to a reverse tabnabbing vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
KsDumper - Dumping Processes Using The Power Of Kernel Space
I always had an interest in reverse engineering. A few days ago I wanted to look at some game internals for fun, but it was packed & protected by EAC EasyAntiCheat. This means its handle were stripped and I was unable to dump the process from Ring3. I decided to try to make a custom driver that...
CVE-2011-3621
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUMBEHINDREVERSEPROXY is enabled...
Authentication flaw
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUMBEHINDREVERSEPROXY is enabled...
CVE-2011-3621
The CVE-2011-3621 entry concerns a reverse proxy handling flaw in FluxBB prior to 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled. The description is supported by the NVD entry, which lists a CVSS2 base score of 7.5 (HIGH) and a CVSS3.1 base score of 9.8 (CRITICAL), indicating a potentially seve...
CVE-2011-3621
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUMBEHINDREVERSEPROXY is enabled...
CVE-2019-12490
An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...
CVE-2019-12490
An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...
Code injection
An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...
CVE-2019-12490
An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...
CVE-2019-12490
SMF contains a reverse tabnabbing flaw (CVE-2019-12490) in which external links opened with _blank can enable credential theft when a user visits a crafted site. Affected: Simple Machines Forum before 2.0.16. Root cause: improper handling of external links (target="_blank"). Impact documented as ...
CVE-2011-3621: Undefined Security Weakness
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUMBEHINDREVERSEPROXY is enabled...
CVE-2019-12490: Undefined Security Weakness
An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...
Simple Machines Forum (SMF) Reverse Tag Phishing Vulnerability
Simple Machines Forum is developed by Simple Machines open source Internet forums , message board programs. A reverse tag phishing vulnerability exists in Simple Machines Forum SMF versions prior to 2.0.16. The vulnerability stems from the use of blank for external links. An attacker can exploit...
Internet Bug Bounty: Squid as reverse proxy RCE and data leak
Summary: This was a very difficult experience as Squid maintainers took a long time to answer. I tried getting help from HackerOne support, Dropbox support and the Internet Bug Bounty never e-mailed me back to no avail. What could have taken a few days took months. The vulnerability concerns a...
AntiCheat-Testing-Framework - Framework To Test Any Anti-Cheat
Framework to test any Anti-Cheat on the market. This can be used as Template or Code Base to test any Anti-Cheat and learn along the way. The entry level to reverse AntiCheats and Cheats is quite high, therefore, I'm realeasing all the code I developed during my research. The main idea is to help...
Exploit for Improper Privilege Management in Centreon
CVE-2019-19699 Centreon =\ After logging in we navi...
Content Delivery Networks handle HTTP headers in different and unexpected ways
Overview A Content Delivery Network CDN is a distributed network of proxy servers that deliver web content collected from a back end web server using a temporary local storage called a cache. HTTP cache poisoning is a type of attack that allows a remote attacker to inject arbitrary content using...
