789 matches found
Scientific Linux Security Update : wget on SL7.x x86_64 (20181030)
Security Fixes : - wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar CVE-2018-0494 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid119201; scriptversion"1.5";...
CentOS 7 : wget (CESA-2018:3052)
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
curl: Cookie injection for other servers
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
Oracle Linux 7 : wget (ELSA-2018-3052)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3052 advisory. - Fix CVE-2018-0494 1576106 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
Moderate: Red Hat Security Advisory: wget security and bug fix update
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar
A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains...
EulerOS Virtualization 2.5.0 : wget (EulerOS-SA-2018-1348)
According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...
EulerOS Virtualization 2.5.1 : wget (EulerOS-SA-2018-1342)
According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...
EulerOS 2.0 SP2 : wget (EulerOS-SA-2018-1315)
According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary...
EulerOS 2.0 SP3 : wget (EulerOS-SA-2018-1316)
According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary...
Cookie Injection Vulnerability in the Frontend of DaQuanZhouAuto.com
It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. Cookie injection vulnerability exists in the frontend of DaQuanzhouAuto.com, which can be exploited by attackers to obtain sensitive...
Cookie Injection
libcurl.so is vulnerable to cookie injection attacks. A malicious user can inject new cookies by writing to a cookie jar file that is later read and used for other requests as it is treated by the library as a different cookie...
curl: Cookie injection for other servers
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
DEBIAN-CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar...
Session Fixation
aiohttpsession is vulnerable to session fixation attacks. A malicious user with access to a valid cookie can inject the cookie into another user's browser to gain control of that user's session...
Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)
Summary Multiple vulnerabilities have been discovered in curl that is embedded in FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2016-8615 DESCRIPTION: cURL/libcurl is vulnerable to cookie injection, caused by an error related to fgets function. By using a malicious...
GLSA-201806-01 : GNU Wget: Cookie injection
The remote host is affected by the vulnerability described in GLSA-201806-01 GNU Wget: Cookie injection A vulnerability was discovered in GNU Wgets respnew function which does not validate \r\n sequences in continuation lines. Impact : A remote attacker could inject arbitrary cookie entry request...
GNU Wget: Cookie injection
Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description A vulnerability was discovered in GNU Wget’s respnew function which does not validate \r\n sequences in continuation lines. Impact A remote attacker...