12 matches found
Fedora 39 : curl (2023-0f8d1871d8)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0f8d1871d8 advisory. - fix cookie injection with none file CVE-2023-38546 - fix SOCKS5 heap buffer overflow CVE-2023-38545 Tenable has extracted the preceding descriptio...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2023:4044-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4044-1 advisory. - CVE-2023-38545 is a heap-based buffer overflow vulnerability in the SOCKS5 proxy handshake in...
Debian DSA-5523-1 : curl - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5523 advisory. - CVE-2023-38545 is a heap-based buffer overflow vulnerability in the SOCKS5 proxy handshake in libcurl and curl. When curl is given a hostname to pass along...
Debian dla-3613 : curl - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3613 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3613-1 [email protected]...
Security update for wget (moderate)
This update for wget fixes the following issues: - CVE-2018-0494: Fixed a cookie injection vulnerability by checking for and joining continuation lines. bsc1092061 This update was imported from the SUSE:SLE-12:Update update project...
SUSE-SU-2018:1367-1 Security update for wget
This update for wget fixes the following issues: - CVE-2018-0494: Fixed Cookie injection vulnerability by checking for and joining continuation lines. bsc1092061...
SUSE-SU-2018:1373-1 Security update for wget
This update for wget fixes the following issues: - CVE-2018-0494: Fixed a cookie injection vulnerability by checking for and joining continuation lines. bsc1092061...
Google Chrome < 41.0.2272.76 Multiple Vulnerabilities
Binary data 8684.pasl...
Shopv8 Mall system v12. 0 7 Cookie injection vulnerability-vulnerability warning-the black bar safety net
! Shopv8 Mall system v12. 0 7, program download: http://www.mycodes.net/20/1099.htm Vulnerability file: list. asp http://127.0.0.1/list.asp?id=338 Injection transit-blast account password http://127.0.0.1:808/jmCook.asp?jmdcw=338%20union%20select%201,2,3,4,5,6,7,8,9,1 0,1 1,1 2,1...
Cannes the company registered the class website system cookie injection vulnerability-vulnerability warning-the black bar safety net
Cannes the company registered the class website system v9. 6 cookies injection transit http://www.xxxx.com /jmcook. asp? jmdcw=1 7+and 1=2 union select 1,2,password,4,5,password,7,8,9,1 0,1 1,1 2,1 3 from admin Background get the shell cookies name kid can upload ewe modify the style Database...
7 1 1 enterprise web site management program V6. 0 Then proof upload vulnerability and exploit-vulnerability warning-the black bar safety net
sfmb ----------------------- The other day a Cookie injection vulnerability, and today they turned to see to In the ADMIN directory there are 2 Upload File upfile. asp and upfile2. asp These 2 components of the function is: without logging in the backend, without having to cut packages, direct...
kdelibs: Cross-domain cookie injection vulnerability
Background KDE is a widely-used desktop environment based on the Qt toolkit. kcookiejar in kdelibs is responsible for storing and managing HTTP cookies. Konqueror uses kcookiejar for storing and managing cookies. Description kcookiejar contains a vulnerability which may allow a malicious website ...