Machform HTTP Host Header Injection Vulnerability

MachForm is an HTML form builder that lets you create contact forms, surveys, order forms or any other web form without writing code. An HTTP host header injection vulnerability exists in versions prior to Machform 16. The vulnerability stems from improper validation of the host header. An attack...

CVE-2021-20101

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...

CVE-2021-20101

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...

CVE-2021-20101: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...

Trojan-Dropper.Win32.Googite.a Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ff30fbee3724d80dcb9471c0b553c99a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Googite.a Vulnerability: Unauthenticated Open Proxy Description: Googite malwar...

Design/Logic Flaw

Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...

CVE-2021-31702

Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...

CVE-2021-31702

Frontier ichris versions up to 5.18 are affected by a vulnerability where the application mishandles DNS requests for the hostname supplied in the HTTP Host header, potentially enabling a DoS condition as demonstrated by sending 127.0.0.1 repeatedly. The issue stems from how the DNS request is fo...

PT-2021-19478

Name of the Vulnerable Software and Affected Versions Frontier ichris versions through 5.18 Description The issue concerns mishandling of DNS requests for the hostname in the HTTP Host header. This can be exploited by submitting 127.0.0.1 multiple times, leading to a denial-of-service DoS...

CVE-2021-31702: Undefined Security Weakness

Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS...

CVE-2021-25179

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

Cross site scripting

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2021-25179

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2021-25179

SolarWinds Serv-U File Server vulnerable to Cross Site Scripting (XSS) via the HTTP Host header in versions before 15.2. The root cause is XSS arising from host header handling. Impact is content integrity/defacement risk on affected deployments; no exploitation details are provided. Remediation:...

CVE-2021-25179: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

PT-2021-16450

Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the HTTP Host header. Recommendations: For versions prior to 15.2, update to version 15.2 or later to resolve the...

GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

Denial Of Service (DoS)

restify-paginate is vulnerable to denial of service. An attacker is able to crash the application by omitting the HTTP Host header in the HTTP request...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...