5433 matches found
NewStart CGSL MAIN 4.05 : httpd Multiple Vulnerabilities (NS-SA-2019-0118)
The remote NewStart CGSL host, running version MAIN 4.05, has httpd packages installed that are affected by multiple vulnerabilities: - Off-by-one error in the modssl Certificate Revocation List CRL verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a...
Knot Resolver < 4.1.0 Multiple Vulnerabilities
Knot Resolver is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
JamieWeb: HTTP Request Smuggling
is vulnerable to host header injection because the host header can be changed to something outside the target domain. Attack vectors are somewhat limited but depends on how the host header is used by the back-end application code. If code references the hostname used in the URL such as password...
Security Bulletin: IBM Event Streams is affected by Go vulnerabilities
Summary IBM Event Streams has addressed the following vulnerabilities in the Go Runtimes shipped. Vulnerability Details CVEID: CVE-2019-9741 DESCRIPTION: Golang GO is vulnerable to HTTP header injection, caused by improper validation of input in the http.NewRequest. By sending a specially-crafted...
Lyst: Web Cache poisoning attack leads to User information Disclosure and more
Hello Your Web-Server is vulnerable to web cache poisoning attacks. This means, that the attacker are able to get another user Information. If you are logged in and visit this website For example: https://www.lyst.com/shop/trends/mens-dress-shoes/blahblah.css Then the server will store the...
PayPal: DoS on PayPal via web cache poisoning
On https://paypal.com/, you could impact core functionality by using an invalid Transfer-Encoding header to replace JavaScript files from www.paypalobjects.com with the message '501 Not Implemented'. This was patched and awarded a $9,700 bounty. By the time you read this, there should be a full...
CVE-2018-13384
A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains...
CVE-2018-13384
The connected documents confirm a Host Header Redirection vulnerability in Fortinet FortiOS, affecting FortiOS SSL-VPN web portal prior to version 6.0.5. The root cause is improper validation of HTTP request headers, enabling an unauthenticated remote attacker to induce redirects to arbitrary web...
Automattic: Denial of service to WP-JSON API by cache poisoning the CORS allow origin header
The WP-JSON implementation on some wordpress.com websites I've tested is vulnerable to denial of service where by an attacker can provide an arbitrary Origin header in the request, which is then echoed back in the response via the Access-Control-Allow-Origin header, which is cached and served to...
WordPress Inkblot Theme 4.9.10 Cross Site Request Forgery
Exploit Title : WordPress Inkblot Themes 4.9.10 Cross Site Request Forgery Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 22/05/2019 Vendor Homepage : wordpress.org - gravityforms.com Software Download Link : github.com/mgsisk/inkblot/archive/master.zip Softwar...
EulerOS Virtualization 3.0.1.0 : httpd (EulerOS-SA-2019-1419)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server before 2.4.8 allows remote attackers...
Apache Tomcat 7.0.41 < 7.0.79 Cache Poisoning Vulnerability
Binary data 700673.pasl...
Apache Tomcat 8.0.x < 8.0.45 Cache Poisoning
Binary data 700685.pasl...
Apache Tomcat 9.0.x < 9.0.0.M22 Multiple Vulnerabilities
Binary data 700702.pasl...
Denial Of Service (DoS)
jenkins is vulnerable to denial of service DoS. The vulnerability exists as remote authenticated users can update the site metadata through a missing permission check, and can be combined with DNS cache poisoning to cause DoS...
Authorization Bypass
squid is vulnerable to authorization bypass. The vulnerability exists as it is possible to bypass same-origin restrictions, and also possible to conduct cache-poisoning attacks...
ok.ru: [okmedia.insideok.ru] Web Cache Poisoing & XSS
XSS and Web Cache Poisoning at .insideok.ru via X-Forwarded-Host header Web Cache Poisoing & XSS okmedia.insideok.ru...
FreeBSD : buildbot -- CRLF injection in Buildbot login and logout redirect code (5536ea5f-6814-11e9-a8f7-0050562a4d7b)
A CRLF can be injected in Location header of /auth/login and /auth/logout This is due to lack of input validation in the buildbot redirection code. It was not found a way to impact Buildbot product own security through this vulnerability, but it could be used to compromise other sites hosted on t...
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation Windows: LUAFV Delayed Virtualization Cache Manager Poisoning EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteri...