51 matches found
HTTP Request Smuggling in reel
reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...
HTTP Request Smuggling in reel
reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...
oklahoma.reel-scout.com Cross Site Scripting vulnerability OBB-1421753
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dallas.reel-scout.com Cross Site Scripting vulnerability OBB-1421749
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Reel Environmental Issues Vulnerability
Reel is an open source "event-based" Web server . An environmental issue vulnerability exists in Reel 0.6.1 and earlier versions, which can be exploited to conduct HTTP request smuggling attacks because the program does not properly parse the Content-Length and Transfer Encoding headers...
CVE-2020-7659
reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...
HTTP Request Smuggling
Overview reel is a fast, non-blocking "evented" web server built on httpparser.rb, websocket-driver, Celluloid::IO, and nio4r. Note: This project is deprecated, and is not maintained anymore. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and...
Reel King™ Slot - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Reel King™ Slot published at the 'play' market has multiple vulnerabilities...
Multi Reel Jackpot Slots - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Multi Reel Jackpot Slots published at the 'play' market has multiple vulnerabilities...
Unfixed XSS vulnerability at www.rihannanow.com
Security researcher ReeL, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.rihannanow.com, which at the time of submission ranked 69387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is currentl...
systemedevote-rfi.txt
//////////////////////////////////////////// Système de vote en temps réel v1.0 Remote File İnclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...