PT-2018-2802

Name of the Vulnerable Software and Affected Versions urllib3 versions prior to 1.23 Description The issue is related to errors in handling registration data in the urllib3 module of the Python programming language. This can allow a remote attacker to disclose protected information. Specifically,...

undertow: Client can use bogus uri in Digest authentication

It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server...

undertow: Client can use bogus uri in Digest authentication

It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server...

CVE-2018-1000007

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...

CVE-2018-1000007: Undefined Security Weakness

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...

UBUNTU-CVE-2018-1000007

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...

PT-2018-3241

Name of the Vulnerable Software and Affected Versions libcurl versions 7.1 through 7.57.0 Description The issue is related to insufficient protection of registration data in the libcurl library. This could allow a remote attacker to gain unauthorized access to protected information. When libcurl ...

libcsoap nanohttp Denial of Service Vulnerability

libcsoap is a SOAP parsing and encapsulation code written in C. It contains simple HTTP server and client code. nanohttp is one of the HTTP servers. A denial of service vulnerability exists in nanohttp in libcsoap. A remote attacker can exploit this vulnerability to cause a denial of service null...

CVE-2015-2297

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

CVE-2015-2297

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

Null pointer dereference

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

CVE-2015-2297

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

CVE-2015-2297

CVE-2015-2297 affects the libcsoap project’s nanohttp component. A vulnerability in nanohttp allows a remote attacker to trigger a denial of service via a specially crafted Authorization header , causing a NULL pointer dereference and application crash. Reported details across sources consistentl...

CVE-2015-2297

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

PT-2017-6565

Name of the Vulnerable Software and Affected Versions libcsoap affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved via a crafted Authorization header...

CVE-2015-2297: NULL Pointer Dereference

nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

BSA-2017-377

Security Advisory ID : BSA-2017-377 Component : Apache HTTPD Revision : 3.0: Final In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by...

Intel Active Management Technology - System Privileges

!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...

Joyent Node.js npm Information Disclosure Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. npm is one of the package management and distribution tools . An information disclosure vulnerability exists in the CLI of npm versions prior to 2.15.1 and 3.x...

CVE-2016-3956

The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with arbitrary requests, which allows remote HTTP servers to obtain sensitive information by reading Authorization headers...