723 matches found
Harvest: Cookie Injection at 'harvestapp.com'
Hello guys, Details: Well, initially I was testing for CRLF Carriage Return Line Feed Injection, but how turned out, I was able to inject cookie without CRLF, just via value at HTTP Request. PoC: Attacker able to inject new cookie from any application place, e.g...
SQL Injection Vulnerability in Showgg.asp Page ID Parameter of Chengdu Yilian Government Website System
Chengdu Yilian Government Website System is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is:/Showgg.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use the vulnerabilit...
QIWI: [wallet.rapida.ru] XSS Cookie flashcookie
Steps to reproduce 1 Заражаем cookie пользователя. Можно использовать Cookie Injection, XSS или CRLF Injection на .rapida.ru Так как используется Django и не самый свежий Python, то возможно сделать Cookie Injection через Google Analytics тут расписана эта атака https://habrahabr.ru/post/272187/...
SQL Injection Vulnerability in the Electronic Newspaper System of Nanchang Vnet Digital Media Co.
Vnet Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. The product suffers from SQL...
ownCloud: [api.owncloud.org] CRLF Injection
PoC: https://api.owncloud.org/%23%0dSet-Cookie:crlf=injection2;domain=.owncloud.org; HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Wed, 27 Jul 2016 10:28:01 GMT\r\n Server: Apache\r\n Strict-Transport-Security: max-age=63072000\r\n X-Xss-Protection: 1; mode=block\r\n Location:...
CVE-2016-5702
phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI...
DEBIAN-CVE-2016-5702
phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI...
UBUNTU-CVE-2016-5702
phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI...
Cookie attribute injection attack
PMASA-2016-18 Announcement-ID: PMASA-2016-18 Date: 2016-06-23 Summary Cookie attribute injection attack Description A vulnerability was found where, under some circumstances, an attacker can inject arbitrary values in the browser cookies. Severity We consider this to be non-critical. Mitigation...
OECMS4.2 /source/control/index/buylist.php cookie注入
No description provided by source...
Mozilla Firefox < 44.0 Multiple Vulnerabilities
Binary data 9075.prm...
Ubuntu 14.04 LTS : Firefox regression (USN-2880-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2880-2 advisory. USN-2880-1 fixed vulnerabilities in Firefox. This update introduced a regression which caused Firefox to crash on startup with some configurations. This update...
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2880-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2880-1 advisory. Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gab...
Firefox < 44 Multiple Vulnerabilities (Mac OS X)
The version of Firefox installed on the remote Mac OS X host is prior to 44. It is, therefore, affected by the following vulnerabilities : - A cookie injection vulnerability exists due to illegal control characters being stored as cookie values in violation of RFC6265. A remote attacker can explo...
Firefox < 44 Multiple Vulnerabilities
The version of Firefox installed on the remote Windows host is prior to 44. It is, therefore, affected by the following vulnerabilities : - A cookie injection vulnerability exists due to illegal control characters being stored as cookie values in violation of RFC6265. A remote attacker can exploi...
Ubuntu: Security Advisory (USN-2880-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2880-1 firefox vulnerabilities
Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gabor Krizsanits discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker...
USN-2880-1: Firefox vulnerabilities
Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gabor Krizsanits discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker...
Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2016-00386)
Cisco FireSIGHT Management Center enables centralized management of network security and operational functions for Cisco ASA with FirePOWER Services and Cisco FirePOWER devices. A cross-site scripting vulnerability exists in Management Center for Cisco FireSIGHT System Software version 6.0.1. A...
Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2016-00385)
Cisco FireSIGHT Management Center enables centralized management of network security and operational functions for Cisco ASA with FirePOWER Services and Cisco FirePOWER devices. A cross-site scripting vulnerability exists in Management Center for Cisco FireSIGHT System Software version 6.0.1. A...