497 matches found
Important: mod_dav_svn, subversion
Issue Overview: It was found that when an SVN server both svnserve and httpd with the moddavsvn module searched the history of a file or a directory, it would disclose its location in the repository if that file or directory was not readable for example, if it had been moved. CVE-2015-3187 An...
iTop 2.2.1 - Cross-Site Request Forgery
Exploit for php platform in category web applications Product: iTop Vendor: Combodo Vulnerable Versions: 2.2.1 and probably prior Tested Version: 2.2.1 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 2016 Vendor Patch: February 11, 2016 Public...
CVE-2015-5259
Integer overflow in the readstring function in libsvnrasvn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read...
UBUNTU-CVE-2015-5343
Integer overflow in util.c in moddavsvn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service subversion server crash or memory consumption and possibly execute arbitrary code via a skel-encoded request body, which...
Apple Xcode multiple security vulnerabilities
Restrictions bypass, weak encryption, information discosure, multiple svn vulnerabilities...
RHEL 7 : subversion (RHSA-2015:1742)
Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Fedora 23 : mediawiki-1.25.2-2.fc23 (2015-13920)
T94116 SECURITY: Compare API watchlist token in constant time T97391 SECURITY: Escape error message strings in thumb.php T106893 SECURITY: Don't leak autoblocked IP addresses on Special:DeletedContributions T102562 Fix InstantCommons parameters to handle the new HTTPS-only policy of Wikimedia...
RedHat Update for subversion RHSA-2015:1633-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : subversion on SL6.x i386/x86_64 (20150817)
An assertion failure flaw was found in the way the SVN server processed certain requests with dynamically evaluated revision numbers. A remote attacker could use this flaw to cause the SVN server both svnserve and httpd with the moddavsvn module to crash. CVE-2015-0248 It was found that the...
Apache Subversion Multiple Vulnerabilities (Aug 2015)
Apache Subversion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:subversion";...
mod_dav_svn, subversion security update
CentOS Errata and Security Advisory CESA-2015:1633 Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
Moderate: Red Hat Security Advisory: subversion security update
Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...
Vulnerability Assessment Penetration Testing: VAPT
The set of scripts included in this package will create a Kali/SamuraiWTF type environment for the performing of Vulnerability Assessments and Penetration Testing. The goal of this project was to allow a portable set of tools to be installed onto an Ubuntu or Raspbian system, allowing the tester ...
http-svn-info NSE Script
Requests information from a Subversion repository. Script Arguments http-svn-info.url This is a URL relative to the scanned host eg. /default.html default: / slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline,...
Pornhub: Publicly exposed SVN repository, ht.pornhub.com
After I found the subversion repository I visited the following location https://netreact.eu/hubtraffic I could see the usernames in the repo and the following weak credentials gave me access: stefan:123456 An attacker can commit code to this location which could be mirrored on the main site and...
53kf多站点配置不当导致整站可下载
简要描述： 详细说明： http://oa1.53kf.com/.svn/entries http://test2.53kf.com/.svn/entries http://test4.53kf.com/.svn/entries SVN泄露可导致整站下载 其中一个是OA系统 其他两个看源码疑似管理系统 漏洞证明： http://oa1.53kf.com/.svn/entries http://test2.53kf.com/.svn/entries http://test4.53kf.com/.svn/entries SVN泄露可导致整站下载 其中一个是OA系统 其他两个看源码疑似管理系统...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the git-svn package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.
The vulnerability of the git-svn-1.7.1 package on the CentOS operating system can lead to a breach of protected information. Exploiting this vulnerability can be carried out remotely...