kiboit phastpress server-side request forgeing vulnerability

Kiboit Phastpress versions 3.10 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the scripts service endpoint dynamically constructing URL whitelists based on HTTP host headers controlled by attackers. Unauthenticated attackers can forge these headers t...

EUVD-2011-0010

Malware in sbrugna...

PT-2022-9944

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Automation versions 21.0.1 through 21.0.2 Description The issue is caused by improper validation of input by the HOST headers, allowing a remote attacker to inject HTTP HOST headers by sending a specially crafted HTTP request...

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

Cross site request forgery (csrf)

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

Ziproxy Security Bypass Vulnerability

Ziproxy server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...