3679 matches found
Urlbuster - Powerful Mutable Web Directory Fuzzer To Bruteforce Existing And/Or Hidden Files Or Directories
Powerful web directory fuzzer to locate existing and/or hidden files or directories. Similar to dirb or gobuster, but with a lot of mutation options. Installation pip install urlbuster Features Proxy support Cookie support Basic Auth Digest Auth Retries for slow servers Persistent and...
Dropcontact: Host Header Injection.
Someone could change the redirection when login out from firstpromoter, by tweaking the logout request and using http X-Forwarded-Host, someone could redirect the logout toward a bad place...
Security Bulletin: Host Header Injection vulnerability in IBM Operations Analytics - Log Analysis (pre-login scenario)
Summary HTTP Host header value is use to generate links, import scripts and generate password resets. The value can be controlled by attacker and be exploited using web-cache poisoning and alternative channels. In Log Analysis, host header injection can be exploited to run scripts in the context ...
HTTP Host Header Injection
A host header injection is inserting both the carriage return and linefeed characters into user input to trick the server. Successful exploitation could allow attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks...
CoSoSys Endpoint Protector Injection Vulnerability
CoSoSys Endpoint Protector is a cross-platform data loss prevention system from CoSoSys Romania. The system supports USB and peripheral port control, dynamic data scanning, USB encryption and static data scanning. An injection vulnerability exists in CoSoSys Endpoint Protector version 5.1.0.2,...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
Design/Logic Flaw
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-13285
CVE-2019-13285 affects CoSoSys Endpoint Protector 5.1.0.2, as shown by multiple connected records. The vulnerability is described as a Host Header Injection in Endpoint Protector; the available sources do not provide detailed exploitation vectors or affected components beyond the general product/...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
Design/Logic Flaw
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
CVE-2019-12425
CVE-2019-12425 affects Apache OFBiz 17.12.01 and is described as a Host header injection vulnerability caused by accepting arbitrary Host headers. This is documented across multiple sources (e.g., NVD entry and Red Hat, CNVD, OSV, CVE lists) with the consistent description that OFBiz 17.12.01 is ...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
CVE-2020-11814
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...
CVE-2020-11814
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...
Design/Logic Flaw
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...
CVE-2020-11814
CVE-2020-11814 describes a Host Header Injection in qdPM 9.1 that can allow an attacker to spoof a header and redirect users to malicious sites. Connected sources (Red Hat, CNVD, CVE.org, NVD, PRION, etc.) confirm the issue but do not provide detailed technical exploit steps, affected component g...