Lucene search
+L

51 matches found

Github Security Blog
Github Security Blog
added 2021/05/24 6:13 p.m.72 views

HTTP Request Smuggling in reel

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...

7.5CVSS7.4AI score0.01334EPSS
SaveExploits0References3Affected Software1
RubySec
RubySec
added 2021/05/24 12:00 a.m.24 views

HTTP Request Smuggling in reel

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...

7.5CVSS1AI score0.01334EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2020/10/18 5:18 p.m.12 views

oklahoma.reel-scout.com Cross Site Scripting vulnerability OBB-1421753

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/18 5:16 p.m.11 views

dallas.reel-scout.com Cross Site Scripting vulnerability OBB-1421749

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/06/02 12:00 a.m.13 views

Reel Environmental Issues Vulnerability

Reel is an open source "event-based" Web server . An environmental issue vulnerability exists in Reel 0.6.1 and earlier versions, which can be exploited to conduct HTTP request smuggling attacks because the program does not properly parse the Content-Length and Transfer Encoding headers...

7.5CVSS7.4AI score0.01334EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/01 1:15 p.m.10 views

CVE-2020-7659

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...

7.5CVSS7.6AI score0.01334EPSS
SaveExploits0References1
Snyk
Snyk
added 2020/05/29 3:11 p.m.5 views

HTTP Request Smuggling

Overview reel is a fast, non-blocking "evented" web server built on httpparser.rb, websocket-driver, Celluloid::IO, and nio4r. Note: This project is deprecated, and is not maintained anymore. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and...

8.2CVSS6.2AI score0.01334EPSS
SaveExploits0References2
hackapp
hackapp
added 2016/04/01 9:52 a.m.13 views

Reel King™ Slot - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Reel King™ Slot published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:52 a.m.9 views

Multi Reel Jackpot Slots - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Multi Reel Jackpot Slots published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
xssed
xssed
added 2008/11/07 12:00 a.m.16 views

Unfixed XSS vulnerability at www.rihannanow.com

Security researcher ReeL, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.rihannanow.com, which at the time of submission ranked 69387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is currentl...

6.6AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2007/08/16 12:00 a.m.21 views

systemedevote-rfi.txt

//////////////////////////////////////////// Système de vote en temps réel v1.0 Remote File İnclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...

7.4AI score
SaveExploits0
Rows per page
Query Builder