CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing

Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...

Sentrifugo 跨站脚本漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A cross-site scripting vulnerability exists in Sentrifugo version 3.2, which originates from inserting an x-forward-f...

CVE-2020-35678

A flaw was found in python-autobahn, where it allows redirect header injection. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

DEBIAN-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

UBUNTU-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

Design/Logic Flaw

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

CVE-2020-35678 affects Autobahn|Python before 20.12.3, which is vulnerable to redirect header injection. Public details in connected documents indicate the issue is addressed by upgrading to Autobahn-Python 20.12.3 or later (fixed in 20.12.3 per openSUSE/OpenObvious advisories and PyPI release no...

Security update for python3 (important)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2020:2333-1 Rating: important References: 1155094 1174091 1174571 1174701 1177211 1178009 1179193 1179630 Cross-References: CVE-2019-16935 CVE-2019-18348 CVE-2019-20907 CVE-2019-5010 CVE-2020-14422 CVE-2020-26116...

Python Input Validation Error Vulnerability

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An input validation error vulnerability exists in Python versions prior to 20.12.3 that allows redirection header...

PT-2020-17383 · Dart · Http Package

Name of the Vulnerable Software and Affected Versions: http package versions 0.12.2 and earlier http package versions prior to 0.13.3 Description: An issue was discovered in the http package for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:3930-1)

This update for python3 fixes the following issues : Fixed CVE-2020-27619 bsc1178009, where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. Change setuptools and pip version numbers according to new wheels Handful of changes to make python36 compatible with SLE15 and SLE1...

Thingsboard Injection Vulnerability

Thingsboard is a Java-based platform for monitoring, management, and data collection of IOT devices from the Thingsboard team. A security vulnerability exists in versions prior to ThingsBoard v3.2 that stems from the injection of host headers in password reset emails. This allowed an attacker to...

SUSE-SU-2020:3930-1 Security update for python3

This update for python3 fixes the following issues: - Fixed CVE-2020-27619 bsc1178009, where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. - Change setuptools and pip version numbers according to new wheels - Handful of changes to make python36 compatible with SLE15 and...