EUVD-2008-6973

Malware in sbrugna...

RHEL 5 : httpd and httpd22 (RHSA-2010:0011)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0011 advisory. - httpd: NULL pointer defer in modproxyftp caused by crafted EPSV and PASV reply CVE-2009-3094 - httpd: modproxyftp FTP command injection vi...

Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection

The backdoor implanted on Cisco devices by exploiting a pair of zero-day flaws in IOS XE software has been modified by the threat actor so as to escape visibility via previous fingerprinting methods. "Investigated network traffic to a compromised device has shown that the threat actor has upgrade...

CVE-2022-22831

CVE-2022-22831 affects Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user by manipulating the Authorization HTTP header, due to insufficient validation in that header. The result is an unauthorized, unauthenticated privilege escalation to a highly privileged admin account, with high i...

PT-2022-15699

Name of the Vulnerable Software and Affected Versions Servisnet Tessa version 0.0.2 Description An issue was discovered that allows an attacker to add a new sysadmin user via a manipulation of the Authorization HTTP header. Recommendations For Servisnet Tessa version 0.0.2, consider restricting...

CVE-2018-15839

D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header...

Buffer overflow

D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15839: Improper Restriction of Operations within the Bounds of a Memory Buffer

D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header...

PT-2018-13229

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description A buffer overflow issue exists due to a long Authorization HTTP header. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

Buffer overflow

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172: Improper Restriction of Operations within the Bounds of a Memory Buffer

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

PT-2018-12920

Name of the Vulnerable Software and Affected Versions TP-Link WR840N affected versions not specified Description The issue is related to a buffer overflow that can be triggered by a long Authorization HTTP header. Recommendations At the moment, there is no information about a newer version that...

CVE-2018-12706

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header...

PT-2018-11344

Name of the Vulnerable Software and Affected Versions DIGISOL DG-BR4000NG affected versions not specified Description The issue is related to a Buffer Overflow that can be triggered via a long Authorization HTTP header. Recommendations At the moment, there is no information about a newer version...

Authorization

The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header...

CVE-2018-9843: Deserialization of Untrusted Data

The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header...

PT-2018-19067

Name of the Vulnerable Software and Affected Versions CyberArk Password Vault Web Access versions prior to 9.9.5 CyberArk Password Vault Web Access versions 10.x prior to 10.1 Description The issue allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization...

CVE-2014-9575: Undefined Security Weakness

VDG Security SENSE formerly DIVA before 2.3.15 allows remote attackers to bypass authentication, and consequently read and modify arbitrary plugin settings, via an encoded : colon character in the Authorization HTTP header...