3652 matches found
SpeedStream 5200 Authentication Bypass Config Download Vulnerability
No description provided by source. SpeedStream 5200 Authentication Bypass - hkm 12/10/2008 Server: NetPort Software 1.1 It is posible to bypass authentication by modifying the Host header. If you use a Host that is not the authentic one it will not require authentication. http://189.255.255.255./...
speedstream-bypass.txt
SpeedStream 5200 Authentication Bypass - hkm 12/10/2008 Server: NetPort Software 1.1 It is posible to bypass authentication by modifying the Host header. If you use a Host that is not the authentic one it will not require authentication. http://189.255.255.255./ - This would bypass authentication...
IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities
Binary data 4725.prm...
8E6科技R3000 Internet过滤器Host头绕过检测漏洞
BUGTRAQ ID: 30541 8e6科技的R3000上网行为管理系统是软硬件集成的系统，允许管理者能有效控制与管理互联网用户的上网行为。 R3000 Internet过滤器所提供的HTTP URL过滤功能没有正确的验证Host头，用户可以访问设备设置了访问限制的网站。但用户无法利用这个漏洞绕过基于IP地址的过滤限制。 8E6 Technologies R3000 Internet Filter 2.0.12.10 8E6 Technologies ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2008-3494
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header...
Design/Logic Flaw
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header...
CVE-2008-3494
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header...
CVE-2008-3494
The CVE-2008-3494 entry concerns the 8e6 R3000 Internet Filter version 2.0.12.10. The issue is a header-parsing bypass: remote attackers can bypass intended restrictions by sending an extra HTTP Host header with leading text before the real Host header. This is caused by how the filter parses the...
CVE-2008-2162
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
SonicWALL Email Security Error Page Cross-Site Scripting Vulnerability
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. CVE: CVE-2008-2162 Last updated: Aug. 8, 2017, 1:3...
sonicwall-xss.txt
Affected Software/Device: SonicWall E-mail Security Version: 6.1.1 Vulnerability: Cross Site Scripting Risk: Low Description: SonicWALL Email Security is award-winning anti-spam, anti-virus, anti-phishing, policy, and compliance management e-mail protection solution. Available as a hardened...
Design/Logic Flaw
The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to 1 conduct HTTP request splitting and HTTP...
PT-2008-3103 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 7 Description: The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer does not block dangerous HTTP request headers when certain 8-bit character sequences are...
Stack overflow
Multiple stack-based buffer overflows in the legacy modjk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long 1 Host header, or 2 Hostname within a Host header...
CVE-2007-6258
Multiple stack-based buffer overflows in the legacy modjk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long 1 Host header, or 2 Hostname within a Host header...
Apache mod_jk2 host header buffer overflow
Overview A vulnerability exists in the legacy version of the modjk2 Apache module. If successfully exploited, the vulnerability may allow an attacker to run arbitrary code on affected system. Description The host header field allows HTTP 1.1 RFC 2616 compliant servers to host multiple domains usi...
urlevasion.txt
I dont know if its new but i code it during a PentTest and i would like to share it with you. It is based on code developed By sinhack research labs: http://sinhack.net/URLFilteringEvasion/sakeru.tx Description: "Fortinet's URL blocking functionality can be bypassed by specially-crafted HTTP...
FortiGuard URL filtering protection bypass
It's possible to bypass filtering by removing Host:header from HTTP request of by fragmenting request...
