Prefix escape

Overview In fastify-http-proxy before version 4.3.1, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is /pub/, a user expect that accessing /priv on the target service would not be possible. Unfortunately, it is...

GHSA-QMW8-3V4G-GWJ4 Prefix escape

Impact By crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is /pub/, a user expect that accessing /priv on the target service would not be possible. Unfortunately, it is. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N...

PT-2021-14418

Name of the Vulnerable Software and Affected Versions fastify-reply-from versions prior to 4.0.2 Description The issue allows an attacker to escape the prefix of the proxied backend service by crafting a specific URL. For example, if the base URL of the proxied server is "/pub/", an attacker can...

Hacking smart devices to convince dementia sufferers to overdose

Weve looked at numerous smart tracker watches over recent years. All had some disastrous security flaws. However, we found one recently that was a little different: it was aimed at the elderly, particularly those with dementia or other cognitive impairments. If the wearer goes for a walk and...

Razer US: SQL Injection on careers.razerzone.com within the Admin interface without any access credentials

The researcher discovered a SQL Injection vulnerability on our careers.razerzone.com host, which is used to list job openings for Razer worldwide and receive application submissions from potential hires. This vulnerability could have allowed the exfiltration of admin credentials as well as person...

Design/Logic Flaw

The backend service process in Lenovo Solution Center aka LSC before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors...

PT-2017-7979

Name of the Vulnerable Software and Affected Versions Lenovo Solution Center versions prior to 3.3.0002 Description The issue allows local users to gain SYSTEM privileges via unspecified vectors in the backend service process. Recommendations For versions prior to 3.3.0002, update to version...

Varnish Backend Service HTTP Response Parsing Buffer Overflow Vulnerability

Varnish is a high-performance open source HTTP gas pedal . Varnish handles back-end HTTP responses with a buffer overflow vulnerability that allows an attacker to exploit the vulnerability to crash the application or execute arbitrary code...

CVE-2014-2589: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Dashboard Backend service stats/dashboard.jsp in SonicWall Network Security Appliance NSA 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter...

SA-CONTRIB-2012-050 - CDN2 Video - Unsupported

CDN2 is a plug and play module and video management service for Drupal. The module does not sanitize output correctly, allowing for a cross-site scripting XSS vulnerability. Additionally, the Form API is not correctly utilized allowing for cross-site request forgery CSRF attempts. This module...