850 matches found
[SECURITY] [DSA 3705-1] curl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3705-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini November 03, 2016 https://www.debian.org/security/faq -...
USN-3123-1 curl vulnerabilities
It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to hijack the authentication of a TLS connection. CVE-2016-7141 Nguyen Vu Hoang discovered that curl incorrectly handled escaping certain strings. A remote...
SUSE-SU-2016:2714-1 Security update for curl
This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8621: curlgetdate read out of bounds bsc1005642 - CVE-2016-8619: double-free in krb5 code bsc1005638 -...
Debian Security Advisory DSA 3705-1 (curl - security update)
Several vulnerabilities were discovered in cURL, an URL transfer library: CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case insensitive...
DSA-3705-1 curl - security update
Bulletin has no description...
SUSE-SU-2016:2700-1 Security update for curl
This update for curl fixes the following issues: - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8621: curlgetdate read out of bounds bsc1005642 - CVE-2016-8619: double-free in krb5 code bsc1005638 - CVE-2016-8618:...
CURL-CVE-2016-8615 cookie injection for other servers
If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar. The issue pertains to the function that loads cookies into memory, which reads the specified file...
cookie injection for other servers
If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar. The issue pertains to the function that loads cookies into memory, which reads the specified file...
CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
cURL -- multiple vulnerabilities
The cURL project reports cookie injection for other servers case insensitive password comparison OOB write via unchecked multiplication double-free in curlmaprintf double-free in krb5 code glob parser write/read out of bounds curlgetdate read out of bounds URL unescape heap overflow via integer...
PT-2016-7521
Name of the Vulnerable Software and Affected Versions curl versions prior to 7.51 Description A problem has been discovered where a malicious HTTP server can inject new cookies for arbitrary domains into a cookie jar file. This occurs when the cookie state is written into the cookie jar file and...
UBUNTU-CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
Harvest: Cookie Injection at 'harvestapp.com'
Hello guys, Details: Well, initially I was testing for CRLF Carriage Return Line Feed Injection, but how turned out, I was able to inject cookie without CRLF, just via value at HTTP Request. PoC: Attacker able to inject new cookie from any application place, e.g...
SQL Injection Vulnerability in Showgg.asp Page ID Parameter of Chengdu Yilian Government Website System
Chengdu Yilian Government Website System is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is:/Showgg.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use the vulnerabilit...
QIWI: [wallet.rapida.ru] XSS Cookie flashcookie
Steps to reproduce 1 Заражаем cookie пользователя. Можно использовать Cookie Injection, XSS или CRLF Injection на .rapida.ru Так как используется Django и не самый свежий Python, то возможно сделать Cookie Injection через Google Analytics тут расписана эта атака https://habrahabr.ru/post/272187/...
SQL Injection Vulnerability in the Electronic Newspaper System of Nanchang Vnet Digital Media Co.
Vnet Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. The product suffers from SQL...
ownCloud: [api.owncloud.org] CRLF Injection
PoC: https://api.owncloud.org/%23%0dSet-Cookie:crlf=injection2;domain=.owncloud.org; HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Wed, 27 Jul 2016 10:28:01 GMT\r\n Server: Apache\r\n Strict-Transport-Security: max-age=63072000\r\n X-Xss-Protection: 1; mode=block\r\n Location:...
CVE-2016-5702
phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI...