20567 matches found
K21800102: HTTP RFC enforcement is bypassed when a redirect iRule is applied to the virtual server
Security Advisory Description A specifically crafted HTTP request may bypass BIG-IP HTTP RFC enforcement and may lead the BIG-IP system to pass malformed HTTP requests to a target pool member web server. This issue occurs when all of the following conditions are met: A virtual server with an iRul...
Coppermine Gallery 1.6.25 Remote Code Execution
Exploit Title: coppermine-gallery 1.6.25 RCE Application: coppermine-gallery Version: v1.6.25 Bugs: RCE Technology: PHP Vendor URL: https://coppermine-gallery.net/ Software Link: https://github.com/coppermine-gallery/cpg1.6.x/archive/refs/tags/v1.6.25.zip Date of found: 05.09.2023 Author: Mirabba...
PT-2023-6170
Name of the Vulnerable Software and Affected Versions Sangfor Next-Gen Application Firewall version NGAF8.0.17 Description The issue is related to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid...
Server side request forgery on fortiview top threats report generation feature.
...
CVE-2023-43697
The CVE-2023-43697 vulnerability affects the SICK APU RDT400 component, tied to MAID (Modification of Assumed-Immutable Data). An unprivileged, remote attacker can cause the site to fail loading necessary strings by changing file paths via HTTP requests, exposing a network-accessible impact with ...
SUSE-SU-2023:4009-1 Security update for python-gevent
This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling bsc1215469...
Ruijie Reyee Mesh Router - MITM Remote Code Execution Exploit
Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution RCE Date: April 15, 2023 Exploit Author: Mochammad Riyan Firmansyah of SecLab Indonesia Vendor Homepage: https://ruijienetworks.com Software Link:...
CVE-2023-30910: Inconsistent Interpretation of HTTP Requests
HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests...
RHEL 9 : nodejs (RHSA-2023:5533)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5533 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
PT-2023-28918
Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is due to missing authorization in RDT400. Recommendations At the...
Ruijie Reyee Mesh Router - MITM Remote Code Execution (RCE)
Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution RCE Date: April 15, 2023 Exploit Author: Mochammad Riyan Firmansyah of SecLab Indonesia Vendor Homepage: https://ruijienetworks.com Software Link:...
CVE-2023-44860
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request...
Authorization
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request...
Improper Authorization
pretix is vulnerable to Improper Authorization. An attacker is able to exploit this vulnerability by sending a specially crafted HTTP request to a vulnerable pretix instance. This request could contain a malicious X-Forwarded-For header that spoofs the attacker's IP address. If the pretix instanc...
CVE-2023-44860
CVE-2023-44860 affects NETIS SYSTEMS N3Mv2 v1.0.1.865. A flaw in the authorization component of the HTTP request allows a remote attacker to cause a denial of service. Public details in connected sources confirm the DoS impact but do not provide exploit code or exact vectors beyond the HTTP-based...
CVE-2023-44860
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request...
Rocky Linux 8 : nodejs:18 (RLSA-2023:4536)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4536 advisory. - The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request...
CVE-2023-44860: Incorrect Authorization
An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request...
PT-2023-29312 · Netis Systems · N3Mv2
Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS N3Mv2 version 1.0.1.865 Description: An issue in the authorization component of the HTTP request allows a remote attacker to cause a denial of service. Recommendations: For version 1.0.1.865, consider restricting access to the...