85 matches found
CVE-2026-103405
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters...
CVE-2026-103405 Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters...
viewLinc 5.1.2.367 - Carriage Return Line Feed Attack Detection
viewLinc 5.1.2.367 and sometimes 5.1.1.50 allows remote attackers to inject a carriage return line feed CRLF character into the responses returned by the product, which allows attackers to inject arbitrary HTTP headers into the response returned. !/usr/bin/env python3 -- coding: utf-8 --...
Pypiserver <1.2.5 - Carriage Return Line Feed Injection Detection
Pypiserver through 1.2.5 and below is susceptible to carriage return line feed injection. An attacker can set arbitrary HTTP headers and possibly conduct cross-site scripting attacks via a %0d%0a in a URI. !/usr/bin/env python3 -- coding: utf-8 -- """Pypiserver through 1.""" import re from...
EUVD-2013-1871
Malware in sbrugna...
EUVD-2010-4380
Malware in sbrugna...
EUVD-2020-24832
Malware in sbrugna...
EUVD-2019-14003
Malware in sbrugna...
EUVD-2009-4057
Malware in sbrugna...
EUVD-2014-2178
Malware in sbrugna...
EUVD-2018-11511
Malware in sbrugna...
EUVD-2015-2141
Malware in sbrugna...
CVE-2025-41376: Improper Neutralization of CRLF Sequences
CRLF Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via '/index.php/survey/index/sid/ /token/fwyfw%0d%0aCookie:%20POC'...
CVE-2013-2582
CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitizatio...
CVE-2005-4712
CRLF injection vulnerability in processsignup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well...
Apache HTTP Server Input Validation Error Vulnerability (CNVD-2024-36395)
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server version 2.4.58 and earlier versions, which can be exploited t...
CVE-2023-29406
A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...
K10420455: Python urllib and urllib2 library vulnerability CVE-2016-5699
Security Advisory Description CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython aka Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. CVE-2016-5699 Impact An attacker...
GHSA-5957-5CRX-79JX Zenario CMS vulnerable to CRLF injection
CRLF injection vulnerability in Zend\Mail ZendMail in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email...