4850 matches found
ownCloud: [forum.owncloud.org] IE, Edge XSS via Request-URI
PoC Internet Explorer, Edge: https://blackfan.ru/x?r=https://forum.owncloud.org//%252e%252e blackfan.ru/x?r - simple redirection script, that necessary for exploitation HTTP Response: html Information No route found for "GET //%2e%2e"...
ownCloud: [api.owncloud.org] CRLF Injection
PoC: https://api.owncloud.org/%23%0dSet-Cookie:crlf=injection2;domain=.owncloud.org; HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Wed, 27 Jul 2016 10:28:01 GMT\r\n Server: Apache\r\n Strict-Transport-Security: max-age=63072000\r\n X-Xss-Protection: 1; mode=block\r\n Location:...
Silurus Classifieds 2.0 Cross Site Scripting
Title: Silurus Classifieds XSS Vulnerability Software : Silurus Classifieds Software Version : v2.0 Vendor: http://snowhall.com/slides/silurus Vulnerability Published : 2016-07-25 Author：zhiweijiang Email:[email protected] Impact : MediumCVSS2 Base : 4.3, AV:N/AC:M/Au:N/C:N/I:P/A:N Bug...
Apache Httpd < 2.2.32 : mod_userdir CRLF injection
Possible CRLF injection allowing HTTP response splitting attacks for sites which use moduserdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value...
Apache Httpd < 2.4.25 : mod_userdir CRLF injection
Possible CRLF injection allowing HTTP response splitting attacks for sites which use moduserdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value...
CVE-2016-4604
Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...
Code injection
Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...
CVE-2016-4604
Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...
CVE-2016-4585: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...
PT-2016-6061
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.3 Description The issue allows remote attackers to spoof the displayed URL in Safari. This is achieved through an HTTP response that specifies redirection to an invalid TCP port number. Recommendations For...
CVE-2016-4604: URL Redirection to Untrusted Site
Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...
PT-2016-6042
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.3 Apple Safari versions prior to 9.1.2 Apple tvOS versions prior to 9.2.2 Description A cross-site scripting XSS issue exists in the WebKit Page Loading implementation, allowing remote attackers to inject...
CVE-2016-4585
Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...
GLSA-201607-10 : Varnish: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201607-10 Varnish: Multiple vulnerabilities Varnish fails to properly validate input from HTTP headers, and does not deny requests with multiple Content-Length headers. Impact : Remote attackers could conduct an HTTP response...
Amazon Linux AMI : varnish (ALAS-2016-721)
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length headers in an HTTP...
Gratipay: don't leak Server version for assets.gratipay.com
Hey, I've captured the HTTP request while visiting assets.gratipay.com The whole HTTP response is as following: GET / HTTP/1.1 Host: assets.gratipay.com:443 Accept: / Accept-Encoding: gzip, deflate, sdch, br Accept-Language: en-US,en;q=0.8 Origin: https://www.youtube.com Referer:...
Important: varnish
Issue Overview: Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length...
Moodle: source code security analysis report
Several vulnerabilities were discovered in Moodle 'Moodle' software: File System Path Manipulation Incorrect User Input Filtration when Using the unserialize Function Incorrect Newline Symbol Filtration in HTTP-response Headers Using Insufficiently Random Generators in Cryptography HttpOnly Cooki...
MGASA-2016-0234 Updated libtorrent-rasterbar packages fix security vulnerability
A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent-rasterbar in the parsechunkheader function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of...