1518 matches found
UBUNTU-CVE-2018-1000007
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...
PT-2018-3241
Name of the Vulnerable Software and Affected Versions libcurl versions 7.1 through 7.57.0 Description The issue is related to insufficient protection of registration data in the libcurl library. This could allow a remote attacker to gain unauthorized access to protected information. When libcurl ...
libcsoap nanohttp Denial of Service Vulnerability
libcsoap is a SOAP parsing and encapsulation code written in C. It contains simple HTTP server and client code. nanohttp is one of the HTTP servers. A denial of service vulnerability exists in nanohttp in libcsoap. A remote attacker can exploit this vulnerability to cause a denial of service null...
Null pointer dereference
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
CVE-2015-2297 affects the libcsoap project’s nanohttp component. A vulnerability in nanohttp allows a remote attacker to trigger a denial of service via a specially crafted Authorization header , causing a NULL pointer dereference and application crash. Reported details across sources consistentl...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
BSA-2017-377
Security Advisory ID : BSA-2017-377 Component : Apache HTTPD Revision : 3.0: Final In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by...
Intel Active Management Technology - System Privileges
!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...
Joyent Node.js npm Information Disclosure Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. npm is one of the package management and distribution tools . An information disclosure vulnerability exists in the CLI of npm versions prior to 2.15.1 and 3.x...
Swift3 Replay Attack Vulnerability
OpenStack is a cloud platform management project.Swift is one of the storage projects for storing permanent static data.Swift3 is a middleware that provides access to OpenStack Swift through the Amazon S3 API. Swift3 has a security vulnerability that allows a remote attacker to perform a replay...
CVE-2015-8466
Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header...
UBUNTU-CVE-2015-8466
Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header...
Enter: No rate limit which leads to "Users information Disclosure" including verfification documents etc.
HOST api.romit.io Endpoint /v0/cash/auth/login Issue When an attacker tries to login at app.romit.io, he is prompted to enter the PIN . There is no rate limit to verify this. Although there is a an authorization header Authorization: Credential=b67b0b10571ac00444de3cffde0b5b05,...
Buffer overflow
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header...
CVE-2014-4880
CVE-2014-4880 describes a buffer overflow in Hikvision DVR RTSP handling that enables remote code execution. The NVD entry notes a vulnerability in Hikvision DVR DS-7204 firmware (2.2.10 build 131009) and other models, exploitable via a long RTSP PLAY request with an oversized Authorization heade...
CVE-2014-1830
Requests aka python-requests before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request...