142 matches found
devise-two-factor 1.1.0 and earlier vulnerable to replay attacks
A OTP replay vulnerability in devise-two-factor 1.1.0 and earlier allows local attackers to shoulder-surf a user's TOTP verification code and use it to login after the user has authenticated. By not "burning" a previously used TOTP, devise-two-factor allows a narrow window of opportunity aka the...
Snapchat's CAPTCHA Hacked in 30 Minutes, 100 Line of Code
It was only going to be a matter of time before someone figured out a way past Snapchat’s new CAPTCHA verification method. Just one day after the photo sharing application announced its latest security measure, one researcher claimed Wednesday that he was able to hack it with as few as 100 lines ...
PT-2012-5361
Name of the Vulnerable Software and Affected Versions Belkin wireless routers Surf N150 Model F7D1301v1 Belkin wireless routers N900 Model F9K1104v1 Belkin wireless routers N450 Model F9K1105V2 Belkin wireless routers N300 Model F7D2301v1 Description The issue allows remote attackers to access th...
Unfixed XSS vulnerability at www.surf-kite.fr
Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.surf-kite.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...
FreeBSD : surf -- private information disclosure (039d057e-544e-11e1-9fb7-003067b2972c)
surf does not protect its cookie jar against access read access from other local users %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...
FreeBSD Ports: surf
The remote host is missing an update to the system as announced in the referenced advisory. VID 039d057e-544e-11e1-9fb7-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID 039d057e-544e-11e1-9fb7-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: surf
The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
surf -- private information disclosure
surf does not protect its cookie jar against access read access from other local users...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...
CVE-2009-4460
CVE-2009-4460 describes cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the rid parameter to index.php, faq.php, and register.php. The provided documents do not specify affected versi...
CVE-2009-4460: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...
Debian Security Advisory DSA 1623-1 (dnsmasq)
The remote host is missing an update to dnsmasq announced via advisory DSA 1623-1. OpenVAS Vulnerability Test $Id: deb16231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1623-1 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Yet another wretched trick: Surf Jacking-vulnerability warning-the black bar safety net
Author: thorn This technique is today EnableSecurityissue. The prerequisite is to be able tointercepted trafficit. Specifically, it can monitor the uplink traffic, you can modify the downstream flow. Method by the arp spoofing, DNS spoofing, wireless monitor or the like. Some people might say, ca...
Debian DSA-1623-1 : dnsmasq - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's dnsmasq packages to implement the recommended...
[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-1623-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...
DSA-1623-1 dnsmasq - cache poisoning
Bulletin has no description...
Surf fixes a few security vulnerabilities-vulnerability warning-the black bar safety net
In 80sec notification to travel into the presence of the security vulnerability after that, surf to 6. 3 0 released a new version of the browser, fixes the previously mentioned security vulnerability, the specific update can be found http://blog. maxthon. cn/, the update fixes three security...
Unfixed XSS vulnerability at ws1.surf-town.net
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting ws1.surf-town.net, which at the time of submission ranked 214758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...
CVE-2001-0972
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie UserID 1, i.e. "0888888."...
CVE-2001-0972
The CVE-2001-0972 entry concerns Surf-Net ASP Forum prior to version 2.30, where admin cookies are derived from the UserID and are easily guessable (example: admin cookie for UserID 1 is “0888888”). This creates a remote‑attack risk: a attacker could calculate the admin cookie and gain administra...