723 matches found
EulerOS Virtualization 2.5.1 : wget (EulerOS-SA-2018-1342)
According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...
EulerOS Virtualization 2.5.0 : wget (EulerOS-SA-2018-1348)
According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...
EulerOS 2.0 SP3 : wget (EulerOS-SA-2018-1316)
According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary...
EulerOS 2.0 SP2 : wget (EulerOS-SA-2018-1315)
According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary...
Cookie Injection Vulnerability in the Frontend of DaQuanZhouAuto.com
It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. Cookie injection vulnerability exists in the frontend of DaQuanzhouAuto.com, which can be exploited by attackers to obtain sensitive...
Cookie Injection
libcurl.so is vulnerable to cookie injection attacks. A malicious user can inject new cookies by writing to a cookie jar file that is later read and used for other requests as it is treated by the library as a different cookie...
curl: Cookie injection for other servers
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
DEBIAN-CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
Session Fixation
aiohttpsession is vulnerable to session fixation attacks. A malicious user with access to a valid cookie can inject the cookie into another user's browser to gain control of that user's session...
Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)
Summary Multiple vulnerabilities have been discovered in curl that is embedded in FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2016-8615 DESCRIPTION: cURL/libcurl is vulnerable to cookie injection, caused by an error related to fgets function. By using a malicious...
GLSA-201806-01 : GNU Wget: Cookie injection
The remote host is affected by the vulnerability described in GLSA-201806-01 GNU Wget: Cookie injection A vulnerability was discovered in GNU Wgets respnew function which does not validate \r\n sequences in continuation lines. Impact : A remote attacker could inject arbitrary cookie entry request...
GNU Wget: Cookie injection
Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description A vulnerability was discovered in GNU Wget’s respnew function which does not validate \r\n sequences in continuation lines. Impact A remote attacker...
Amazon Linux AMI : wget (ALAS-2018-1040)
A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains.CVE-2018-0494 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI...
Medium: wget
Issue Overview: A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains.CVE-2018-0494 Affected Packages: wget Issue Correction: Run yum update wget or yum update --advisory ALAS-2018-1040 to updat...
openSUSE: Security Advisory for wget (openSUSE-SU-2018:1383-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for wget (moderate)
This update for wget fixes the following issues: - CVE-2018-0494: Fixed a cookie injection vulnerability by checking for and joining continuation lines. bsc1092061 This update was imported from the SUSE:SLE-12:Update update project...
SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2018:1373-1)
This update for wget fixes the following issues : - CVE-2018-0494: Fixed a cookie injection vulnerability by checking for and joining continuation lines. bsc1092061 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...