Blockchain: HTTP Header Injection/HTTP_Response_Splitting

Submitter observed that CloudFlare-protected sites will serve content from other CloudFlare-protected sites when the "Host" HTTP request header is modified in transit. A PoC for an attacker to modify a victim user's "Host" HTTP request header could not be presented by the submitter; consequently...

Design/Logic Flaw

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...

CVE-2017-6367

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...

CVE-2017-6367: Improper Input Validation

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...

PT-2017-17022

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server version 8.0.10.1 Description The issue involves a crafted HTTP request that can cause the Windows service to crash. This is achieved by including a long Host header and an invalid Content-Length header in the request...

CVE-2016-5933

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...

Design/Logic Flaw

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...

CVE-2016-5933

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...

CVE-2016-5933

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...

CVE-2016-5933

IBM Tivoli Monitoring Basic Services Vulnerability (CVE-2016-5933) affects IBM Tivoli Monitoring with the Firewall Gateway feature activated. The issue is a host header injection that could lead to HTTP cache poisoning or firewall bypass. Affected releases include IBM Tivoli Monitoring 6.2.x and ...

CVE-2016-5933: Undefined Security Weakness

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference : 1997223...

PT-2017-8817

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring versions 6.2 through 6.3 Description The issue allows for a possible host header injection attack, which could lead to HTTP cache poisoning or firewall bypass. Recommendations For IBM Tivoli Monitoring versions 6.2 throug...

DEBIAN-CVE-2017-6508

CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...

UBUNTU-CVE-2017-6508

CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...

Rockstar Games: use of unsafe host header leads to open redirect

Hi guys I noticed you are using unsafe host header in generating short links. Details First i navigated to my account https://socialclub.rockstargames.com/member/xerojuzto Then i created a new message , and i clicked on share button which shortens the url for example From...

Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)

The plugin contains a Paypal donate button that is echoing the global variable HTTPHOST, which can be manipulated by the visitor. Vulnerable Code: sitemap-ui.php L1310 echo 'http://' . $SERVER'HTTPHOST'...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

Design/Logic Flaw

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...