7499 matches found
Confluence does not respect HTTPS in Server Base URL when 301 redirecting
We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...
Confluence does not respect HTTPS in Server Base URL when 301 redirecting
We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...
Navy Hires Contractor to Data-Mine Gaming Consoles
The U.S. Navy recently hired an outside contractor, Obscure Technologies, to develop computer forensics tools capable of analyzing network traffic and stored data on gaming consoles. The contract, valued at $177,237.50, calls on Obscure Technologies to create hardware and software tools that can ...
at32 Reverse Proxy Detection
The admin console for the at32 Reverse Proxy software was detected on the remote host. at32 Reverse Proxy allows you to host several websites on a single IP or port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58602; scriptversion"1.5"; scriptcvsdate"Date:...
at32 Reverse Proxy Admin Portal No Password
The admin console for the at32 Reverse Proxy software does not require a login password. This can allow a remote attacker to change the reverse proxy rules without having to authenticate. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58603; scriptversion"$Revision:...
Fedora Update for nginx FEDORA-2012-4006
Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-4006 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for nginx FEDORA-2012-3991
Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-3991 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for nginx FEDORA-2011-16075
Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2011-16075 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
dns-ip6-arpa-scan NSE Script
Performs a quick reverse DNS lookup of an IPv6 network using a technique which analyzes DNS server response codes to dramatically reduce the number of queries needed to enumerate large networks. The technique essentially works by adding an octet to a given IPv6 prefix and resolving it. If the add...
[SECURITY] Fedora 15 Update: nginx-1.0.14-1.fc15
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
at32 Reverse Proxy Multiple HTTP Header Fields DoS Vulnerability
at32 Reverse Proxy is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improve the default SSL cipherset in standalone JIRA setup
We are concerned about 'SSL Weak Cipher Suites Supported' and 'SSL Medium Strength Cipher Suites Suppored'. Any suggestions would be helpful...
Improve the default SSL cipherset in standalone JIRA setup
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-27681. panel We are concerned about 'SSL Weak Cipher Suites Supported' and 'SSL Medium Strength Cipher Suites Suppored'. Any suggestions wou...
Improve the default SSL cipherset in standalone JIRA setup
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-27681. panel We are concerned about 'SSL Weak Cipher Suites Supported' and 'SSL Medium Strength Cipher Suites Suppored'. Any suggestions woul...
FreePBX 2.10.0 / Elastic 2.2.0 Remote Code Execution
!/usr/bin/python Exploit Title: FreePBX / Elastix pre-authenticated remote code execution exploit Google Dork: oy vey Date: March 23rd, 2010 Author: muts Version: FreePBX 2.10.0/ 2.9.0, Elastix 2.2.0, possibly others. Tested on: multiple CVE : notyet Blog post :...
Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed...
nginx < 1.0.10 ngx_resolver_copy Function DNS Response Parsing Buffer Overflow
The remote web server is running nginx, a lightweight, high performance web server / reverse proxy and email IMAP/POP3 proxy. The installed version of nginx is earlier than 1.0.10 and is, therefore, affected by a heap-based buffer overflow vulnerability. An issue related to DNS response parsing...
Oreans Themida 2.1.8.0 - '.TMD' File Handling Buffer Overflow
/ Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software developers who wish to protect their...
at32 ReverseProxy - Multiple HTTP Header Field Denial Of Service Vulnerability
Title: at32 Reverse Proxy - Multiple HTTP Header Field Denial Of Service Vulnerability Product : at32 Reverse Proxy Version : v1.060.310 Vendor: http://www.at32.com/doc/rproxy.htm Class: Boundary Condition Error CVE: Remote: Yes Local: No Published: 2012-03-14 Updated: Impact : Medium CVSS2 Base ...