EUVD-2013-3404

Malware in sbrugna...

EUVD-2008-5398

Malware in sbrugna...

EUVD-2010-0651

Malware in sbrugna...

EUVD-2001-0424

Malware in sbrugna...

OpenSSL Heartbeat (Heartbleed) Client Memory Exposure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSSL Heartbeat Heartbleed Client Memory Exposure', 'Description' = %q This module provides a fake SSL service that is intended to leak memory...

After NetScaler upgrade to 13.1-45.61 Bind commands to SSL service not saved

After NetScaler upgrade to firmware version 13.1-45.61, the bind certkey and ECC curve commands to service/service group/internal services are not saved...

UBUNTU-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10679) (FREAK)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a remote attacker, using ...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10649)

According to its self-reported version number, the remote Junos device is affected by multiple vulnerabilities in the implementation of OpenSSL : - An error exists related to 'ec point format extension' handling and multithreaded clients that allows freed memory to be overwritten during a resumed...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10629)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - An error exists in the ssl3readbytes function that permits data to be injected into other sessions or allows denial of service attacks. Note that this...

Juniper Junos OpenSSL Heartbeat Information Disclosure (JSA10623) (Heartbleed)

According to its self-reported version number, the remote Junos device is affected by an information disclosure vulnerability. An out-of-bounds read error, known as Heartbleed, exists in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker,...

KLA10436 Multiple vulnerabilities in VMware vSphere Client

Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities 1. An improper client file update validation can be exploited remotely; 2. An improper...

OpenX Backdoor PHP Code Execution Vulnerability

OpenX Ad Server version 2.8.10 was shipped with an obfuscated backdoor since at least November 2012 through August 2013. Exploitation is simple, requiring only a single request with a rot13'd and reversed payload. This file is part of the Metasploit Framework and may be subject to redistribution...

SSL Certificate with Wrong Hostname

The 'commonName' CN attribute of the SSL certificate presented for this service is for a different machine. TRUSTED...

DSquare Exploit Pack: D2SEC_HOMEBASE

Name| d2sechomebase ---|--- CVE| CVE-2010-0620 Exploit Pack| D2ExploitPack Description| EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability Notes|...

CVE-2010-0620

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability Identifier: ESA-2010-003 Identifier: HB6042 CVE Identifier: CVE-2010-0620 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC HomeBase Server version 6.2.x EMC HomeBase Server version 6.3....

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-020 February 23, 2010 -- CVE ID: CVE-2010-0620 -- Affected Vendors: EMC -- Affected Products: EMC HomeBase Server -- Vulnerability Details: This...

CVE-2010-0620

EMC HomeBase Server suffers a directory traversal and remote code execution vulnerability in the SSL Service (CVE-2010-0620). Affects EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2. The flaw allows an unauthenticated, remote attacker to overwrite arbitrary files and execute code vi...