840 matches found
[SECURITY] Fedora 24 Update: python-autobahn-0.10.9-1.gitcf10233.fc24
Autobahn a networking library that is part of the Autobahn project and prov ides implementations of The WebSocket Protocol http://tools.ietf.org/html/rfc6455 The Web Application Messaging Protocol WAMP http://wamp.ws for Twisted and asyncio on Python 2 & 3 and for writing servers and clients...
Python Twisted Security Bypass Vulnerability
Python Twisted is a set of event-driven network engine based framework implemented in Python. A security bypass vulnerability exists in Python Twisted. An attacker can exploit this vulnerability to perform unauthorized operations...
CVE-2016-1000111
It was discovered that python-twisted-web used the value of the Proxy header from HTTP requests to initialize the HTTPPROXY environment variable for CGI scripts, which in turn was incorrectly used by certain HTTP client implementations to configure the proxy for outgoing HTTP requests. A remote...
UBUNTU-CVE-2016-1000111
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI application's outbou...
CVE-2016-1000111
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI application's outbou...
PT-2016-4503 · Twisted +4 · Twisted +4
Name of the Vulnerable Software and Affected Versions: Twisted versions prior to 16.3.1 Description: The issue arises from the software's failure to address RFC 3875 section 4.1.18 namespace conflicts, which leaves CGI applications unprotected from untrusted client data in the HTTP PROXY...
Twisted Lands: Insomniac Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Twisted Lands: Insomniac Free published at the 'play' market has multiple vulnerabilities...
Vulnerabilities in the server operating system OS X Server, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities of the Twisted module in the Wiki Server server operating system OS X Server are related to errors in the code. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...
CVE-2015-5911
Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...
Code injection
Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...
CVE-2015-5911
Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...
CVE-2015-5911
CVE-2015-5911 affects Apple OS X Server Wiki Server (Twisted) before 5.0.3, with multiple unspecified vulnerabilities that can be triggered via an XML document. The root cause, specific impact, and exploit details are not provided in the supplied documents. No explicit remediation is stated beyon...
SPF - SpeedPhish Framework
SPF SpeedPhish Framework is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Usage: usage: spf.py -h -f -C --all --test -e -g -s --simulate -w -W -d -c --ip -v -y optional arguments: -h, --hel...
Cowrie SSH Honeypot
Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen. Features Some interesting features: Fake filesystem with the ability to add/remove file...
Cowrie - SSH Honeypot
Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen desaster. Features Some interesting features: Fake filesystem with the ability to...
NoPo - NoSQL Honeypot Framework
NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N.B : The framework is under...
OSSEC 2.8 - Insecure Temporary File Creation Vulnerability Privilege Escalation Exploit
Exploit for linux platform in category local exploits !/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
OSSEC 2.8 - hosts.deny Local Privilege Escalation
OSSEC 2.8 - hosts.deny Local Privilege Escalation !/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
Mandriva Update for nulog MDVA-2010:097 (nulog)
Check for the Version of nulog OpenVAS Vulnerability Test Mandriva Update for nulog MDVA-2010:097 nulog Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for nulog MDVA-2010:097 (nulog)
Check for the Version of nulog OpenVAS Vulnerability Test Mandriva Update for nulog MDVA-2010:097 nulog Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...