4949 matches found
SonicWALL Email Security Error Page Cross-Site Scripting Vulnerability
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. CVE: CVE-2008-2162 Last updated: Aug. 8, 2017, 1:3...
CVE-2008-2162: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
sonicwall-xss.txt
Affected Software/Device: SonicWall E-mail Security Version: 6.1.1 Vulnerability: Cross Site Scripting Risk: Low Description: SonicWALL Email Security is award-winning anti-spam, anti-virus, anti-phishing, policy, and compliance management e-mail protection solution. Available as a hardened...
Design/Logic Flaw
The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to 1 conduct HTTP request splitting and HTTP...
PT-2008-3103 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 7 Description: The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer does not block dangerous HTTP request headers when certain 8-bit character sequences are...
Stack overflow
Multiple stack-based buffer overflows in the legacy modjk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long 1 Host header, or 2 Hostname within a Host header...
CVE-2007-6258
Multiple stack-based buffer overflows in the legacy modjk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long 1 Host header, or 2 Hostname within a Host header...
CVE-2007-6258: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in the legacy modjk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long 1 Host header, or 2 Hostname within a Host header...
Apache mod_jk2 host header buffer overflow
Overview A vulnerability exists in the legacy version of the modjk2 Apache module. If successfully exploited, the vulnerability may allow an attacker to run arbitrary code on affected system. Description The host header field allows HTTP 1.1 RFC 2616 compliant servers to host multiple domains usi...
urlevasion.txt
I dont know if its new but i code it during a PentTest and i would like to share it with you. It is based on code developed By sinhack research labs: http://sinhack.net/URLFilteringEvasion/sakeru.tx Description: "Fortinet's URL blocking functionality can be bypassed by specially-crafted HTTP...
FortiGuard URL filtering protection bypass
It's possible to bypass filtering by removing Host:header from HTTP request of by fragmenting request...
CVE-2007-6457
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...
CVE-2007-6457
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...
CVE-2007-6457: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...
SurgeMail v.38k4 webmail Host header Denial of Service Exploit
No description provided by source. ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows version rgod / dl"phpcurl.so"; $url = "http://192.168.0.1"; $puf=strrepeat0xff,0xfff; $header ="POST / HTTP/1.0\r\n"; $header.="Host: $puf\r\n"; $header.="Connection...
SurgeMail v.38k4 webmail Host header Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================== SurgeMail v.38k4 webmail Host header Denial of Service Exploit ============================================================== 0day.today 2018-04-11...
SurgeMail畸形HOST头字段数据拒绝服务漏洞
SurgeMail是一款WEB MAIL应用程序。 SurgeMail不正确处理HTTP POST请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理HTTP POST提交的HOST字段数据，可导致应用程序崩溃，造成拒绝服务攻击。 NetWin SurgeMail 38k4 目前没有解决方案提供： http://www.netwinsite.com/surgemail/ ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows...
Surgemail 38k4 - webmail Host header Denial of Service
milw0rm.com 2007-12-18...
