apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

fastreader Gem for Ruby URI Handling Arbitrary Command Injection

fastreader Gem for Ruby contains a flaw that is triggered during the handling of specially crafted input passed via a URL that contains a ';' character. This may allow a context-dependent attacker to potentially execute arbitrary commands...

RubyGems fastreader - 'entry_controller.rb' Remote Command Execution

source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary commands in the context of the affected...

MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

MiniMagick Gem for Ruby contains a flaw that is triggered during the handling of specially crafted input from an untrusted source passed via a URL that contains a ';' character. This may allow a context-dependent attacker to potentially execute arbitrary commands...

Apache Httpd < 2.4.6 : mod_dav crash

Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault...

Apache 2.2.x < 2.2.24 Multiple XSS Vulnerabilities

According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.24. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Errors exist related to the modules modinfo, modstatus, modimagemap, modldap, and modproxyftp and...

Oracle Java JDK / JRE 6 < Update 30 Multiple Vulnerabilities (Unix)

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 30 and is, therefore, potentially affected by the following vulnerabilities: - A stack overflow error exists related to proxy tunnels. Bug 6670868 - An error exists related to...

apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

Mac OS X NSSpellCheckerCheckString函数file:/// URI处理拒绝服务漏洞

Mac OS X是一款苹果产品中的操作系统 Mac OS X NSSpellCheckerCheckString函数存在一个安全漏洞，通过键盘输入或者处理'file:///'时可导致一个拒绝服务攻击，可使系统崩溃。此漏洞在禁用NSSpellCheckerCheckString函数时也可触发 0 Mac OS X 10.8 厂商解决方案 目前没有详细解决方案提供： http://www.apple.com/...

Microsoft Internet Explorer地址栏 URI欺骗漏洞(CVE-2013-1451)

Bugtraq ID:57641 CVE ID: CVE-2013-1451 Microsoft Internet Explorer是一款流行的WEB浏览器。 在Microsoft Internet Explorer代理服务设置中，如果HTTP和Secure栏中具有相同代理地址和端口，IE没有确保SSL锁定图标与地址栏一致，通过特制的HTML文档触发多个任意主机的HTTPS请求，随后提交一个可信主机的HTTPS请求，再向不可信主机发送一个HTTP请求，可欺骗WEB站点。 0 Microsoft Internet Explorer 9 Microsoft Internet Explorer...

CVE-2012-6102

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

CVE-2012-6102

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

Code injection

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

CVE-2012-6102

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

CVE-2012-6102

The CVE-2012-6102 issue affects Moodle’s Assignment module: specifically the Submissions comments plugin (lib.php). It allows remote attackers to read or modify any user’s submission comments (feedback comments) via a crafted URI in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1. The root cause...

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Атаки через Request-Path + Баги IE

На эту тему скоро будет статейка на пару страниц прим. Хакер, апрель 2013. Идея ужасно банальная, но результат тестирования очень удивил + обнаружены интересные баги. Зачастую при тестировании забывают, что небезопасно могут обрабатываться не только Get/Post/Cookie параметры, но и Request-URI /...

Directory traversal

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...

CVE-2012-5972 SpecView Directory Traversal

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...