Vimeo: [vimeopro.com] CRLF Injection

PoC for any browser other than FireFox http://www.vimeopro.com/crlftest%0dSet-Cookie:test=test;domain=.vimeopro.com HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Fri, 12 Dec 2014 19:28:49 GMT\r\n Server: Apache\r\n Location: http://vimeopro.com/crlftest\r...

EntryPass N5200 - Credentials Exposure

Advisory: EntryPass N5200 Credentials Disclosure EntryPass N5200 Active Network Control Panels allow the unauthenticated downloading of information that includes the current administrative username and password. Details ======= Product: EntryPass N5200 Active Network Control Panel Affected...

WebsiteBaker 2.8.3 Multiple Vulnerabilities

WebsiteBaker versions 2.8.3 and below suffers from cross site scripting, HTTP response splitting, and remote SQL injection vulnerabilities. I. VULNERABILITY ------------------------- Multiple Vulnerabilities in WebsiteBaker 2.8.3 II. BACKGROUND ------------------------- WebsiteBaker helps you to...

WebsiteBaker 2.8.3 - Multiple Vulnerabilities

WebsiteBaker 2.8.3 - Multiple Vulnerabilities ============================================= MGC ALERT 2014-004 - Original release date: March 11, 2014 - Last revised: November 18, 2014 - Discovered by: Manuel Garcia Cardenas - Severity: 10/10 CVSS Base Score...

WebsiteBaker 2.8.3 - Multiple Vulnerabilities

============================================= MGC ALERT 2014-004 - Original release date: March 11, 2014 - Last revised: November 18, 2014 - Discovered by: Manuel Garcia Cardenas - Severity: 10/10 CVSS Base Score ============================================= I. VULNERABILITY...

WebsiteBaker 2.8.3 XSS / SQL Injection / HTTP Response Splitting

============================================= MGC ALERT 2014-004 - Original release date: March 11, 2014 - Last revised: November 18, 2014 - Discovered by: Manuel Garcia Cardenas - Severity: 10/10 CVSS Base Score ============================================= I. VULNERABILITY...

Monstra <= 3.0.1 HTTP Response Splitting

Monstra versions 3.0.1 and below suffer from an HTTP response splitting vulnerability. Monstra = 3.0.1 HTTP Response Splitting /plugins/captcha/crypt/cryptographp.php SetCookie"cryptcookietest", "1"; Header"Location: cryptographp.inc.php?cfg=".$GET'cfg'."&sn=".sessionname."&".SID; so providing...

Monstra 3.0.1 HTTP Response Splitting

Monstra 5.1.2...

Block.io: Various Low level Vulnerabilities

1.XSS protection Not Enabled: Example URL: https://block.io/js/secure/secrets.js?mtime=1412493238 Web Browser XSS Protection is not enabled, or is disabled by the configuration of the 'X-XSS-Protection' HTTP response header on the web server The X-XSS-Protection HTTP response header allows the we...

CVE-2014-6151

CRLF injection vulnerability in IBM Tivoli Integrated Portal TIP 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in IBM Tivoli Integrated Portal TIP 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-6151

CRLF injection vulnerability in IBM Tivoli Integrated Portal TIP 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-6151

CVE-2014-6151 : CRLF injection in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Affected: TIP bundled with Tivoli Network Manager (e.g., TIP 2.2.x in NM 4.1/4.1.1). Remediati...

"Recently updated" plugin can be used to reflect arbitrary static content to browser

This request: noformat /plugins/recently-updated/changes.action?theme=XXXXXXXX noformat results in the response: noformat HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Cache-Control: no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Confluence-Request-Time: 1412654577325...

Fedora 21 : nodejs-0.10.32-1.fc21 / v8-3.14.5.10-14.fc21 (2014-11132)

This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please s...

Design/Logic Flaw

The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header...

CVE-2014-4383

The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header...

DEBIAN-CVE-2014-3985

The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service crash via crafted headers that trigger an out-of-bounds read...

Greenhouse.io: [greenhouse.io] CRLF Injection / Insecure nginx configuration

PoC http://greenhouse.io/%0d%0aSet-Cookie:test=test;domain=.greenhouse.io HTTP Response: Location: http://www.greenhouse.io/ Set-Cookie:test=test;domain=.greenhouse.io Result: Creating cookie test=test on .greenhouse.io $uri or $documenturi is used in the redirection-URL...

CVE-2014-3069

Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management SPM 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecifie...