Lucene search
K

3358 matches found

myhack58
myhack58
added 2011/01/11 12:0 a.m.18 views

Concave Yaya 4. 7 and following versions through the kill EXP-vulnerability warning-the black bar safety net

Description: 0. google : inurl:/otype. asp? classid= 1. Type the destination Station, no accident words will you wait a while,because you want to and other script timeout error,is recommended to drink tea. 2. Then the address bar type the following code, The JavaScript hijack it. 3. Refresh once,...

7.5AI score
Exploits0
Atlassian
Atlassian
added 2010/11/23 3:38 a.m.24 views

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

1.4AI score
Exploits0Affected Software1
Atlassian
Atlassian
added 2010/11/23 3:38 a.m.18 views

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

1.4AI score
Exploits0Affected Software1
Atlassian
Atlassian
added 2010/11/23 3:38 a.m.20 views

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

1.4AI score
Exploits0
Metasploit
Metasploit
added 2010/11/05 4:0 a.m.40 views

Metasploit Web Crawler

This auxiliary module is a modular web crawler, to be used in conjunction with wmap someday or standalone. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Web Crawler. Author: Efrain Torres et at metasploit.com 2010...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2010/10/19 12:0 a.m.73 views

Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

Apache is prone to an information-disclosure vulnerability that affects the 'modproxyhttp' module. Attackers can leverage this issue to gain access to sensitive information that may aid in further attacks. Apache 2.2.9 on Unix is vulnerable. OpenVAS Vulnerability Test $Id: gbapache42102.nasl 7835...

5CVSS0.08284EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2010/10/19 12:0 a.m.41 views

Apache HTTP Server 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

Apache HTTP Server is prone to an information disclosure vulnerability that affects the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS5.8AI score0.08284EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2010/09/14 12:0 a.m.45 views

Fedora Update for sudo FEDORA-2010-14355

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-14355 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.2CVSS0.1AI score0.00362EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2010/08/30 12:30 p.m.1 views

httpd: Reverse proxy sends wrong responses after time-outs

modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...

5CVSS6.6AI score0.08284EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2010/08/20 12:0 a.m.46 views

Mandriva Update for apache MDVSA-2010:153 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2010:153 apache Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5CVSS6.3AI score0.2187EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2010/08/20 12:0 a.m.45 views

Mandriva Update for apache MDVSA-2010:153 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2010:153 apache Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5CVSS0.1AI score0.2187EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2010/08/17 12:0 a.m.40 views

Mandriva Linux Security Advisory : apache (MDVSA-2010:153)

Multiple vulnerabilities has been found and corrected in apache : The modcache and moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path CVE-2010-1452. modproxy in httpd in Apache HTTP Server...

5CVSS6.3AI score0.2187EPSS
Exploits4References3
OSV
OSV
added 2010/08/05 6:17 p.m.3 views

DEBIAN-CVE-2010-2791

modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...

5CVSS5.8AI score0.08284EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2010/08/05 6:17 p.m.34 views

CVE-2010-2791

modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...

5CVSS5.9AI score0.08284EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2010/08/05 6:0 p.m.45 views

CVE-2010-2791

modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...

5CVSS5.5AI score0.08284EPSS
Exploits1
Apache Httpd
Apache Httpd
added 2010/07/23 12:0 a.m.30 views

Apache Httpd < 2.2.10 : Timeout detection flaw (mod_proxy_http)

An information disclosure flaw was found in modproxyhttp in version 2.2.9 only, on Unix platforms. Under certain timeout conditions, the server could return a response intended for another user. Only those configurations which trigger the use of proxy worker pools are affected. There was no...

5CVSS1.1AI score0.08284EPSS
Exploits1Affected Software1
Metasploit
Metasploit
added 2010/07/09 10:21 p.m.19 views

TCP Port Scanner

Enumerate open TCP services by performing a full TCP connect on each port. This does not need administrative privileges on the source machine, which may be useful if pivoting. This module requires Metasploit: https://metasploit.com/download Current source:...

7AI score
Exploits0
UbuntuCve
UbuntuCve
added 2010/06/18 4:30 p.m.36 views

CVE-2010-2068

modproxyhttp.c in modproxyhttp in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive...

5CVSS6.7AI score0.16002EPSS
Exploits2References1
CVE
CVE
added 2010/06/18 4:0 p.m.597 views

CVE-2010-2068

CVE-2010-2068 affects Apache HTTP ServerAffected: mod_proxy_http.c in Apache HTTP Server 2.2.9–2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, OS/2 in certain proxy worker pool configurations.Root cause: timeout handling in mod_proxy_http did not correctly detect timeouts, allowing a re...

5CVSS4.9AI score0.16002EPSS
Exploits2References41Affected Software1
Cvelist
Cvelist
added 2010/06/18 4:0 p.m.30 views

CVE-2010-2068

modproxyhttp.c in modproxyhttp in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive...

5AI score0.16002EPSS
Exploits2References41
Rows per page
Query Builder