Lucene search
+L

2138 matches found

Kitploit
Kitploit
added 2014/03/23 2:33 p.m.29 views

[SearchMyFiles] Alternative to 'Search For Files And Folders' module of Windows + Duplicates Search

SearchMyFiles is an alternative to the standard "Search For Files And Folders" module of Windows. It allows you to easily search files in your system by wildcard, by last modified/created/last accessed time, by file attributes, by file content text or binary search, and by the file size...

7.2AI score
SaveExploits0
OSV
OSV
added 2014/03/20 6:33 p.m.8 views

MGASA-2014-0137 Updated nss, firefox and thunderbird packages fix security vulnerabilities

In the NSS library before version 3.16, in a wildcard certificate, the wildcard character was embedded within the U-label of an internationalized domain name, which is not in accordance with RFC 6125 CVE-2014-1492. Several flaws were found in the processing of malformed web content. A web page...

10CVSS8.5AI score0.83633EPSS
SaveExploits20References15
OSV
OSV
added 2014/03/18 5:18 a.m.8 views

DEBIAN-CVE-2014-2532

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character...

4.9CVSS6.5AI score0.04751EPSS
SaveExploits1References1
Prion
Prion
added 2014/03/18 5:18 a.m.49 views

Design/Logic Flaw

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character...

5.8CVSS6.9AI score0.04751EPSS
SaveExploits1References23Affected Software2
Vulnrichment
Vulnrichment
added 2014/03/18 1:00 a.m.8 views

CVE-2014-2532

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character...

6.8AI score0.04751EPSS
SaveExploits1References23
CVE
CVE
added 2014/03/18 1:00 a.m.672 views

CVE-2014-2532

OpenSSH CVE-2014-2532 affects sshd prior to 6.6, where AcceptEnv lines with wildcards can be bypassed by using a substring before the wildcard, allowing remote attackers to bypass environment restrictions. Affected component: sshd in OpenSSH. Impact cited: potential info disclosure and environmen...

5.8CVSS5.2AI score0.04751EPSS
SaveExploits1References23Affected Software1
UbuntuCve
UbuntuCve
added 2014/03/18 12:00 a.m.34 views

CVE-2014-2532

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character...

5.8CVSS6.8AI score0.04751EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2014/03/18 12:00 a.m.15 views

PT-2014-1796

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 6.6 OpenSSH version 5.3p1 Description The issue allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character in the AcceptEnv lines of the sshd config...

8.1CVSS7AI score0.99506EPSS
SaveExploits88References109
Check Point Advisories
Check Point Advisories
added 2014/02/03 12:00 a.m.10 views

WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)

A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...

6.1AI score0.05208EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
added 2014/01/07 12:00 a.m.9 views

WU-FTPD File Globbing Denial Of Service - Ver2 (CVE-2005-0256)

A denial-of-service vulnerability has been reported in wu-ftpd. A remote attacker could trigger this vulnerability via a glob pattern with a large number of wildcard characters as demonstrated using the dir command. Successful exploitation of this vulnerability would allow a remote attacker to...

5CVSS6.1AI score0.05208EPSS
SaveExploits2
OSV
OSV
added 2013/10/09 2:53 p.m.4 views

DEBIAN-CVE-2013-2099

Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...

4.3CVSS6.1AI score0.04667EPSS
SaveExploits0References1
Prion
Prion
added 2013/10/09 2:53 p.m.26 views

Design/Logic Flaw

Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...

4.3CVSS6.7AI score0.04667EPSS
SaveExploits0References10Affected Software2
OSV
OSV
added 2013/10/09 2:44 p.m.13 views

PSF-2013-1 ssl.match_hostname() wildcard DoS

Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...

4.3CVSS6.4AI score0.04667EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2013/10/03 12:00 a.m.44 views

Ubuntu Update for python2.7 USN-1983-1

Check for the Version of python2.7 OpenVAS Vulnerability Test $Id: gbubuntuUSN19831.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for python2.7 USN-1983-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

4.3CVSS8.2AI score0.05347EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2013/09/22 12:00 a.m.42 views

Multiple DNS NO SUCH NAME Error Responses (CVE-2012-0006)

The Domain Name System DNS is an hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network. When a DNS client needs to look up a name used in a program, it queries DNS servers to resolve the name. If the query names are...

5CVSS6.2AI score0.31083EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2013/09/11 12:00 a.m.21 views

Mandriva Linux Security Advisory : bzr (MDVSA-2013:229)

Updated bzr packages fix security vulnerabilities : A denial of service flaw was found in the way SSL module implementation of Python 3 performed matching of the certificate's name in the case it contained many '' wildcard characters. A remote attacker, able to obtain valid certificate with its...

4.3CVSS7.2AI score0.04667EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2013/09/11 12:00 a.m.85 views

[ MDVSA-2013:229 ] bzr

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:229 http://www.mandriva.com/en/support/security/ Package : bzr Date : September 10, 2013 Affected: Business Server 1.0 Problem Description: Updated bzr packages fix security vulnerabilities: A denial of...

4.3CVSS6.3AI score0.04667EPSS
SaveExploits0
Prion
Prion
added 2013/07/16 6:55 p.m.42 views

Code injection

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...

9.3CVSS7.5AI score0.70211EPSS
SaveExploits2References7Affected Software1
w3af
w3af
added 2013/06/10 11:02 p.m.24 views

dns_wildcard

This plugin compares the contents of www.site.com and site.com and tries to verify if the target site has a DNS wildcard configuration or not. Plugin type Infrastructure Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/05/29 12:00 a.m.27 views

Fedora 19 : python-backports-ssl_match_hostname-3.2-0.3.a3.fc19 (2013-8746)

Fixes CVE-2013-2098 -- Denial of Service with SSL certificates which have specially crafted wildcard patterns. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

5.3AI score
SaveExploits0References2
Rows per page
Query Builder