fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

EUVD-2016-6807

Malware in sbrugna...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

PT-2017-8797

Name of the Vulnerable Software and Affected Versions pecl http versions prior to 3.0.1 Description A buffer overflow issue exists in the HTTP URL parsing functions, potentially allowing remote attackers to execute arbitrary code via non-printable characters in a URL. Recommendations For versions...

CVE-2016-5873: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-6469

A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the proxy process unexpectedly restarting. More Information: CSCvb04312. Known Affected Releases: 9.0.1-1...

PT-2016-6941

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 9.0.1-162 through 9.1.1-074 Description A vulnerability in HTTP URL parsing could allow an unauthenticated, remote attacker to cause a denial of service DoS due to the proxy process unexpectedly...

CVE-2016-6469: Undefined Security Weakness

A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the proxy process unexpectedly restarting. More Information: CSCvb04312. Known Affected Releases: 9.0.1-1...

[Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Real Helix RTSP Server Heap Corruption Vulnerabilities MU-200606-01 June 22, 2006 http://labs.musecurity.com/advisories.html Affected Product / Versions: Real Networks Helix DNA Server 11.0.x Real Networks Helix DNA Server 10.0.x Product Overview: The...