4656 matches found
CVE-2018-17136: Improper Neutralization of Special Elements used in an SQL Command
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...
Monstra CMS HTTP Header Injection Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An HTTP header injection vulnerability exists in the 'cfg' parameter of the...
CVE-2018-16979
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
Design/Logic Flaw
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
CVE-2018-16979
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
CVE-2018-16979
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
CVE-2018-16979
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
CVE-2018-16979
CVE-2018-16979 affects Monstra CMS 3.0.4. The Nuclei template and related descriptions confirm an HTTP header injection vulnerability in plugins/captcha/crypt/cryptographp.php cfg parameter, allowing an attacker to craft input that can redirect users to attacker-controlled domains, enable cache p...
CVE-2018-16979: Improper Neutralization of CRLF Sequences in HTTP Headers
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
PT-2018-13811
Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue allows HTTP header injection in the cfg parameter of the plugins/captcha/crypt/cryptographp.php file. Recommendations For Monstra CMS version 3.0.4, consider restricting access to the vulnerable...
CVE-2018-16832
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header...
CVE-2018-16832
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header...
Design/Logic Flaw
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0...
CVE-2016-1000232
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0...
D-Link DIR-615 - Denial of Service (PoC)
D-Link DIR-615 - Denial of Service PoC Exploit Title: D-Link DIR-615 - Denial of Service PoC Date: 2018-08-09 Vendor Homepage: http://www.dlink.co.in Hardware Link: https://www.amazon.in/D-Link-DIR-615-Wireless-N300-Router-Black/dp/B0085IATT6 Version: D-Link DIR-615 Category: Hardware Exploit...
CVE-2018-15839
D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header...
Buffer overflow
D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header...
CVE-2018-15839
D-Link DIR-615 is affected by CVE-2018-15839: a buffer overflow can be triggered by a long Authorization HTTP header (or session cookie) in the device, enabling a denial of service effect that logs the router out and disrupts network connectivity. Exploit demonstrations describe injecting a long ...
PT-2018-13229
Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description A buffer overflow issue exists due to a long Authorization HTTP header. Recommendations At the moment, there is no information about a newer version that contains a fix for this...