mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-09-28 07:09:41 +02:00
14 lines
1.0 KiB
Markdown
14 lines
1.0 KiB
Markdown
|
# Common Vulnerabilities and Exposures
|
||
|
|
Big CVEs in the last 5 years.
|
||
|
|
|
||
|
|
## Heartbleed
|
||
|
|
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).
|
||
|
|
|
||
|
|
## Shellshock
|
||
|
|
Shellshock, also known as Bashdoor is a family of security bug in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain requests, allowing an attacker to cause vulnerable versions of Bash to execute arbitrary commands. This can allow an attacker to gain unauthorized access to a computer system.
|
||
|
|
|
||
|
|
|
||
|
|
## Thanks to
|
||
|
|
* http://heartbleed.com
|
||
|
|
* https://en.wikipedia.org/wiki/Shellshock_(software_bug)
|