4047 matches found
CVE-2018-25016
Greenbone Security Assistant GSA before 7.0.3 and Greenbone OS GOS before 5.0.0 allow Host Header Injection...
CVE-2018-25016
Greenbone Security Assistant GSA before 7.0.3 and Greenbone OS GOS before 5.0.0 allow Host Header Injection...
Design/Logic Flaw
Greenbone Security Assistant GSA before 7.0.3 and Greenbone OS GOS before 5.0.0 allow Host Header Injection...
CVE-2018-25016
Greenbone Security Assistant GSA before 7.0.3 and Greenbone OS GOS before 5.0.0 allow Host Header Injection...
CVE-2018-25016
CVE-2018-25016 concerns Greenbone Security Assistant (GSA) and Greenbone OS (GOS). Affected versions are GSA prior to 7.0.3 and GOS prior to 5.0.0, where a host header injection vulnerability exists in the GSA web interface. The underlying issue is the handling of HTTP Host headers, enabling inje...
Greenbone Security Assistant 注入漏洞
Greenbone Security Assistant GSA is a web interface.Greenbone Security Assistant is a web interface developed for the Greenbone Security Manager appliance. A security vulnerability exists in Greenbone Security Assistant GSA versions prior to 7.0.3 and Greenbone OS GOS versions prior to 5.0.0 that...
Joomla 存储型XSS漏洞(CVE-2021-26032)
JOOMLA PASSWORD RESET VULNERABILITY AND A STORED XSS FOR FULL COMPROMISE Intro Joomla is one of the most popular CMS-es with over 1.5 million installations world-wide. We pentested Joomla 3.9.24 and found a password reset vulnerability which we chained with a set of vulnerabilities and features t...
CVE-2021-22903
The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to...
CVE-2021-22903
The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to...
Trojan-Dropper.Win32.Googite.a Unauthenticated Open Proxy
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ff30fbee3724d80dcb9471c0b553c99a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Googite.a Vulnerability: Unauthenticated Open Proxy Description: Googite malwar...
CVE-2021-31702
Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...
Design/Logic Flaw
Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...
CVE-2021-31702
Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...
CVE-2021-31702
Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...
CVE-2021-31702
Frontier ichris versions up to 5.18 are affected by a vulnerability where the application mishandles DNS requests for the hostname supplied in the HTTP Host header, potentially enabling a DoS condition as demonstrated by sending 127.0.0.1 repeatedly. The issue stems from how the DNS request is fo...
Frontier ichris 安全漏洞
Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18, which stems from the program incorrectly handling DNS requests that request the hostname in the HTTP host header. No detailed vulnerability details are...
U.S. Dept Of Defense: Cache Posioning leading do Denial of Service on `www.█████████`
Hey! To be clear. This was not an test for Denial of service DOS. I accidentally come a cross this vulnerability when I was testing for Server side request forgery SSRF. I have read you policy well and I was not preforming any type of activity that harmed or slowed you system in anyway. You can...
CVE-2021-22903
A flaw was found in rubygem-actionpack. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. The highest threat from this vulnerability is to data integrity...