The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
1k views

FREAK Attack: How to disable all EXPORT ciphers in OpenSSL?

As we all know all EXPORT ciphers in OpenSSL should be disabled so that we are not vulnerable to the FREAK attack. reference- ...
5
votes
1answer
121 views

What is WebRTC and how can I protect myself against leaking information that doesn't need to be shared?

What is WebRTC and what is it intended to be used for? According to this Browser Leaks Test for WebRTC and IP Leaks, I am currently leaking IP information for IP addresses that I do not believe ...
-1
votes
1answer
43 views

Known Windows vulnerabilities vs actual exploits on Microsoft's websites?

Although some of Microsoft's servers are running on Linux, at least half is running Windows Server of some kind. I'm trying to understand how with so many unpatched and unresolved vulnerabilities in ...
2
votes
1answer
59 views

Secure Flash with Click to Play Plugins in the Enterprise

In the recent light of repeating critical Flash vulnerabilities there are recomendations to use browserplugins like click-to-play to prevent unnecessary flash content to automatically load with every ...
0
votes
0answers
43 views

IIS out-of-the-box security

we are currently starting a new project and require a freshly installed server (Windows 2008R2) with IIS (7.5) on it for hosting WCF services. For now this server will not be available from the ...
-3
votes
1answer
88 views

Is there scan-me-for-vulnerabilities services? [closed]

Where can I get more similar to nmap.online-domain-tools.com scan services. Edit: Probably, nobody know what does nmap.online-domain-tools.com is. I'm trying to explain: Network service. For ...
2
votes
1answer
214 views

How to exploit vulnerabilities found from OpenVAS?

I could not find any match for the vulnerabilities with their CVE numbers found from OpenVAS scanner with exploits using sites such as Rapid 7 Vulnerability DB and Exploit DB, or by using a command ...
0
votes
1answer
76 views

Who will fix the vulnerabilities found in Firewall

As a security guy, i run vulnerability scan and found vulnerabilities in firewall Like as follows SSL Server Allows Anonymous Authentication Vulnerability Solution SOLUTION: Disable support for ...
-2
votes
1answer
670 views

Hown I can test “Microsoft ASP.NET Forms Authentication Bypass” in ASP.Net 4.0.30319

I searched in google for "ASP.Net 4.0.30319 vulnerability " keyword. finally,I found "Microsoft ASP.NET Forms Authentication Bypass" in below link: ...
1
vote
3answers
320 views

How to exploit this include_once vulnerability in PHP?

I'm performing static analisys on a PHP code and came across with this situation: include_once SYSTEM_PATH . 'languages/content-' . $_COOKIE ['lang'] . '.php'; If I try to hack with this HTTP ...
2
votes
3answers
221 views

Stored Cross-Site Scripting Without Parentheses or Spaces

I'm testing a commenting application that takes a link of the form http://google.com and puts it in an href tag as so: <a rel="nofollow" href="http://google.com"> The resulting comment is ...
1
vote
0answers
54 views

use after free vulnerability [closed]

I am struggling trying to understand use after free vulnerabilities, can someone explain it for me with C language source code, and how it can be used to write to arbitary memory location or to cause ...
0
votes
0answers
38 views

security issues with OOXML of POI

I read the announcement today related to security issues with OOXML. These issues are fixed as part of 3.10.1 version (issue : CVE-2014-3574 and CVE-2014-3529). However it does not list which all ...
0
votes
1answer
56 views

How do I report a vulnerability? [closed]

How would I report an international security vulnerability which could cause a lot of damage? I am asking how & where I would report this vulnerability, not now to create a simple vulnerability. ...
0
votes
3answers
749 views

Is CN/Hostname verification against SSL certificate required for non browser software using openssl & why?

In presence of 'trust certificates' & other attributes .. how important is this? Does OpenSSL implement it now & If not why does OpenSSL not implement? This is between non browser client ...
6
votes
1answer
186 views

How easy is it, really, to be hacked as an average user?

tl;dr at the bottom I have been searching around and I haven't been able to find a definitive answer to the question(s). I mainly work with OS X so that will be the base for my questions. How easy ...
0
votes
2answers
74 views

Creative vulnerabilities in unix eval command [closed]

I'm reading through past exams for an information security subject and I came across this. #!/bin/sh #applications launcher X=$1 eval "$X" "Do you think the program is vulnerable to attacks? ...
0
votes
1answer
62 views

Directory names using extensions a security risk?

In our app (PHP, MySQL) we allow users to create templates which are stored in their own subdirectory (which is named by the template name). Someone suggested to use standard file name sanitization ...
0
votes
1answer
137 views

How is a process forced to execute binary code?

I want to understand how a vulnerable internet facing process on some computer is exploited to run arbitrary binary code. I understand how buffer overflows could be used to overwrite the return ...
2
votes
1answer
2k views

TLS v 1.1 vulnerabilities

My question concern TLS : What are the main vulnerabilities of TLS v1.1 ? Actually, none RFC describes v1.1 vulnerabilities, neither what pushed them to change to the new protocol 1.2 except ...
-3
votes
2answers
320 views

What types of software vulnerabilities are out there? [closed]

I have search a lot in the internet and I didn't find anything that is directly answer my question. What type of vulnerabilities are out there. I mean vulnerabilities like buffer overrun, not like XSS ...
1
vote
0answers
66 views

Struts2 + action prefix vulnerability + CVE-2013-4310

CVE-2013-4310 indicates the action prefix (action:) feature of struts2 framework is vulnerable. Hence the vendor released the patch(?) by disabling this feature. However, there is an option to enable ...
5
votes
3answers
1k views

How to access directories disallowed in robots.txt?

While scanning my website with uniscan it found my robots.txt file which disallows access to /cgi-bin/ and other directories, but they are not accessible in browser. Is there a way to access the ...
0
votes
1answer
176 views

How to use a Blind SQL-i keyword?

After scanning my website with uniscan I found a few vulnerabilities. I found this answer here and tried but it does not return anything except what it should return. Blind SQL Injection: [+] Vul ...
1
vote
1answer
44 views

What does the field vuln-security-protection stand-for in the NVD cve lists 2.0?

In the different NVD files which enumerates the CVE, which can be found here There is from time to time the field <vuln:security-protection> , containing often the value ALLOWS_OTHER_ACCESS or ...
0
votes
1answer
59 views

manually approach to check vulnerabilities?

How to check for different vulnerabilities mainly XSS, SQL Injection, CSRF manually??? We are not supposed to use any interceptor tool to read request and all. Is there any other way by which we can ...