4960 matches found
Open redirect
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...
Blockchain: HTTP Header Injection/HTTP_Response_Splitting
Submitter observed that CloudFlare-protected sites will serve content from other CloudFlare-protected sites when the "Host" HTTP request header is modified in transit. A PoC for an attacker to modify a victim user's "Host" HTTP request header could not be presented by the submitter; consequently...
Design/Logic Flaw
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...
CVE-2017-6367
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...
CVE-2017-6367: Improper Input Validation
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...
PT-2017-17022
Name of the Vulnerable Software and Affected Versions Cerberus FTP Server version 8.0.10.1 Description The issue involves a crafted HTTP request that can cause the Windows service to crash. This is achieved by including a long Host header and an invalid Content-Length header in the request...
CVE-2016-5933
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...
Design/Logic Flaw
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...
CVE-2016-5933
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...
CVE-2016-5933
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...
CVE-2016-5933
IBM Tivoli Monitoring Basic Services Vulnerability (CVE-2016-5933) affects IBM Tivoli Monitoring with the Firewall Gateway feature activated. The issue is a host header injection that could lead to HTTP cache poisoning or firewall bypass. Affected releases include IBM Tivoli Monitoring 6.2.x and ...
CVE-2016-5933: Undefined Security Weakness
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...
PT-2017-8817
Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring versions 6.2 through 6.3 Description The issue allows for a possible host header injection attack, which could lead to HTTP cache poisoning or firewall bypass. Recommendations For IBM Tivoli Monitoring versions 6.2 throug...
DEBIAN-CVE-2017-6508
CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...
UBUNTU-CVE-2017-6508
CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...
Rockstar Games: use of unsafe host header leads to open redirect
Hi guys I noticed you are using unsafe host header in generating short links. Details First i navigated to my account https://socialclub.rockstargames.com/member/xerojuzto Then i created a new message , and i clicked on share button which shortens the url for example From...
Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)
The plugin contains a Paypal donate button that is echoing the global variable HTTPHOST, which can be manipulated by the visitor. Vulnerable Code: sitemap-ui.php L1310 echo 'http://' . $SERVER'HTTPHOST'...
CVE-2016-0310
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...