fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

EUVD-2016-6807

Malware in sbrugna...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-6469

A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the proxy process unexpectedly restarting. More Information: CSCvb04312. Known Affected Releases: 9.0.1-1...

[Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Real Helix RTSP Server Heap Corruption Vulnerabilities MU-200606-01 June 22, 2006 http://labs.musecurity.com/advisories.html Affected Product / Versions: Real Networks Helix DNA Server 11.0.x Real Networks Helix DNA Server 10.0.x Product Overview: The...