USN-2523-1 apache2 vulnerabilities

Martin Holst Swende discovered that the modheaders module allowed HTTP trailers to replace HTTP headers during request processing. A remote attacker could possibly use this issue to bypass RequestHeaders directives. CVE-2013-5704 Mark Montague discovered that the modcache module incorrectly handl...

CVE-2013-5704

The modheaders module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."...

CVE-2013-5704

The modheaders module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."...

phpdisk vulnerability released — phpdisk header bypass & getShell exp-vulnerability warning-the black bar safety net

Author:Yaseng Team:CodePlay 1:code auditing PHPDISK network disk system is for domestic use wide range of PHP and MySQL to build the network drivefile storage managementsystem,The author of its source code analysis,found a very interesting stuff..... ! clipimage002 Figure a Figure A is install 下面...

Mozilla Thunderbird 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6352.prm...

Mozilla SeaMonkey 2.x < 2.8 Multiple Vulnerabilities

Binary data 801337.prm...

Thunderbird 10.0.x < 10.0.3 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context of the affected...

OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

McAfee GroupShield for Exchange X-Header Security Bypass Vulnerability

McAfee GroupShield for Microsoft Exchange is prone to an X-Header security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

8E6科技R3000 Internet过滤器Host头绕过检测漏洞

BUGTRAQ ID: 30541 8e6科技的R3000上网行为管理系统是软硬件集成的系统，允许管理者能有效控制与管理互联网用户的上网行为。 R3000 Internet过滤器所提供的HTTP URL过滤功能没有正确的验证Host头，用户可以访问设备设置了访问限制的网站。但用户无法利用这个漏洞绕过基于IP地址的过滤限制。 8E6 Technologies R3000 Internet Filter 2.0.12.10 8E6 Technologies ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-4572

CVE-2006-4572 concerns the Linux kernel’s netfilter ip6_tables. Affects the IPv6 tables implementation in versions prior to 2.6.16.31, allowing remote attackers to bypass security rules: (1) a protocol-disallow rule via a fragment header-adjacent protocol header, and (2) a header-extension rule v...

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass source: https://www.securityfocus.com/bid/5259/info A vulnerability has been reported in certain VirusWall versions. Reportedly, it is possible to bypass the scanning mechanism of VirusWall by adding extraneous spaces in...