CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

PT-2018-3917 · D Link · D-Link Dir-615

Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 version 2.5.17 Description: The issue is related to the lack of proper sanitization of special elements used in an operating system command, allowing remote code execution. This can be exploited by an attacker to execute...

Input validation

In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for...

UBUNTU-CVE-2017-7458

The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty field that should have contained a hostname or IP address...

SPIP shell metacharacter handling code execution vulnerability

SPIP is a free web-based content publishing system. A code execution vulnerability exists in SPIP. Because SPIP fails to remove shell metacharacters from the host field, allowing remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary code...

Remote code execution

SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution...

CVE-2017-9736

SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution...

DEBIAN-CVE-2017-9736

SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution...

UBUNTU-CVE-2017-9736

SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution...

CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...

Monkey HTTP Server <= 1.2.0 Host Header Buffer Overflow Vulnerability

Monkey HTTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee Web Gateway URL Filtering Bypass

Exploit Title: McAfee Web Gateway URL Filtering Bypass Date: 16/04/2012 Author: Gabriel Menezes Nunes Version: McAfee Web Gateway Tested on: McAfee Web Gateway 7.0 CVE: CVE-2012-2212 I found a vulnerability in McAfee Web Gateway 7 that allows access to filtered sites. The appliance believes in th...

CVE-2006-6752

Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Also, it is not clear whether this issue crosses security boundaries...

CVE-2005-3058

Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an 1 HTTP request terminated with a line feed LF and not carriage return line feed CRLF or 2 HTTP request with no Host field, which is still processed by mo...

Webserver4everyone too long URL

It may be possible to make Webserver4everyone execute arbitrary code by sending it a too long url with the Host: field set to 127.0.0.1 OpenVAS Vulnerability Test $Id: ws4etoolongurl.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Webserver4everyone too long URL Authors: Michel Arboi...

CVE-2004-0276

The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be...

[SecurityOffice] Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability -- - -- Type Denial of Service - -- Release Date October 23, 2002 - -- Product / Vendor Web Server 4 Everyone is an Internet and Intranet server that supports HTTP Services. We...