PT-2018-2762

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch Description The issue is related to the implementation of the ResourceHttpRequestHandler class in...

CVE-2018-15756: Undefined Security Weakness

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

Google Developer Discovers a Critical Bug in Modern Web Browsers

Google researcher has discovered a severe vulnerability in modern web browsers that could have allowed websites you visit to steal the sensitive content of your online accounts from other websites that you have logged-in the same browser. Discovered by Jake Archibald, developer advocate for Googl...

CVE-2017-7529 Nginx integer overflow vulnerability analysis-vulnerability warning-the black bar safety net

1, the vulnerability described in In the Nginx range filter in the presence of an integer overflow vulnerability that can be through with the special structure of the range of the HTTP header of the malicious request to trigger this integer overflow vulnerability, and lead to information leakage...

The Nginx range filter plastic overflow vulnerability (CVE–2017–7529)early warning analysis-vulnerability warning-the black bar safety net

I. background description A security issue was identified in the nginx range filter. A specially crafted request might result in an integer overflow and incorrect processing of ranges, potentially resulting in sensitive information leak CVE-2017-7529. --...

The vulnerability of the httpd component in the OpenBSD operating system, which allows a hacker to cause a service failure.

The vulnerability of the httpd component in the OpenBSD operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure memory consumption by using specially crafted requests, utilizing the HTTP Range header...

CVE-2017-5850

httpd in OpenBSD allows remote attackers to cause a denial of service memory consumption via a series of requests for a large file using an HTTP Range header...

CVE-2017-5850

httpd in OpenBSD allows remote attackers to cause a denial of service memory consumption via a series of requests for a large file using an HTTP Range header...

CVE-2017-5850

httpd in OpenBSD allows remote attackers to cause a denial of service memory consumption via a series of requests for a large file using an HTTP Range header...

CVE-2017-5850

httpd in OpenBSD allows remote attackers to cause a denial of service memory consumption via a series of requests for a large file using an HTTP Range header...

CVE-2017-5850: Allocation of Resources Without Limits or Throttling

httpd in OpenBSD allows remote attackers to cause a denial of service memory consumption via a series of requests for a large file using an HTTP Range header...

PT-2017-2267

Name of the Vulnerable Software and Affected Versions OpenBSD httpd affected versions not specified Description The issue is related to resource management errors in the httpd component of the OpenBSD operating system. It can be exploited by a remote attacker to cause a denial of service,...

Palo Alto Networks PAN-OS Management Interface Remote DoS (PAN-SA-2016-0027)

The Palo Alto Networks PAN-OS running on the remote host is affected by a NULL pointer dereference flaw in the web management interface, specifically in the parseRange function within file rx.c, when handling HTTP requests involving a Range header with an empty value. An unauthenticated, remote...

Gratipay: grtp.co is vulnerable to http-vuln-cve2011-3192

vulnerability i have found! | http-vuln-cve2011-3192: | VULNERABLE: | Apache byterange filter DoS | State: VULNERABLE | IDs: CVE:CVE-2011-3192 OSVDB:74721 | The Apache web server is vulnerable to a denial of service attack when numerous | overlapping byte ranges are requested. | Disclosure date:...

SUSE: Security Advisory for squid3 (SUSE-SU-2014:1140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Appweb web server DoS

NULL poiinter dereference on Range: header parsing...

DLA-216-1 squid - security update

Bulletin has no description...

Active DoS Exploits for MS15-034 Under Way

UPDATE – Microsoft’s characterization of MS15-034 as a remote code execution vulnerability certainly has a lot of Windows server admins on edge waiting for the other shoe to drop. In the three days since the bulletin was released warning of a critical vulnerability in the HTTP protocol stack,...

IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. THE POC and online detection of source-vulnerability warning-the black bar safety net

! HTTP. sys remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. the A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the HTTP.sys not correct parsing specially crafted HTTP request to cause this vulnerability. Successful exploitation of...

Embedthis Software Appweb Denial of Service Vulnerability

Embedthis Software AppWeb is a fast and small web server from Embedthis Software, USA, which is used for embedded applications, appliances and web services and supports security defense policies, digestive authentication, virtual hosting and more. A security vulnerability exists in Embedthis...