45 matches found
Shopify: (FULL PATH DISCLOSURE) Unknown MySQL server host 'shardm-reader.chi2.shopify.io'
Hello, Found a website of you guys that is poiting to: shardm-reader.chi2.shopify.io' This domain is disclosure fill path because there is none MySQL server host. POC: https://104.196.154.1/ Response a whole page with path disclosures: lib/patches/mysqlmonitoring.rb:19:in connect'...
curl: re-using authenticated connection when unauthenticated
It was discovered that libcurl could incorrectly reuse NTLM-authenticated connections for subsequent unauthenticated requests to the same host. If an application using libcurl established an NTLM-authenticated connection to a server, and sent subsequent unauthenticated requests to the same server...
D-Link DIR-890L Command Execution Vulnerability
The D-Link DIR-890L is a router device. A command execution vulnerability exists in the D-Link DIR-890L. An attacker can exploit the vulnerability to gain remote control of a server host...
SSH Protocol Versions Supported
Identification of SSH protocol versions supported by the remote SSH Server. Also reads the corresponding fingerprints from the service. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...
CVE-2001-1434: Undefined Security Weakness
Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...