78 matches found
CVE-2023-38434
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
CVE-2023-38434
xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...
Tenda N300 F3 12.01.01.48 Header Processing
!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...
SUSE CVE-2011-3348
The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...
CVE-2022-38381
An improper handling of malformed request vulnerability CWE-228 exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection suc...
CVE-2022-24321
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...
PT-2022-16606
Name of the Vulnerable Software and Affected Versions ClearSCADA versions all EcoStruxure Geo SCADA Expert 2019 versions all EcoStruxure Geo SCADA Expert 2020 versions all Description A vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed...
CVE-2022-24321: Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...
CVE-2021-32637
Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...
CVE-2021-32637: Improper Authentication
Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...
PT-2021-4490
Name of the Vulnerable Software and Affected Versions Authelia versions prior to 4.29.3 Description The issue affects users who are using nginx ngx http auth request module with Authelia. It allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism...
PT-2015-6150
Name of the Vulnerable Software and Affected Versions ThinkServer System Manager TSM Baseboard Management Controller versions prior to 1.27.73476 Description The issue allows remote attackers to cause a denial of service, resulting in a web interface crash via a malformed HTTP request during...
PHPOutsourcing Zorum 3.4 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may allow an attack...
Snowblind Web Server 1.0/1.1 Malformed HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7617/info A denial of service vulnerability has been reported for Snowblind. The vulnerability will cause the web server to crash when processing a malformed HTTP request. http://localhost//...
Linksys WRH54G 1.1.3 - Wireless-G Router Malformed HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29570/info Linksys WRH54G Wireless-G Router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. As a result, memory becomes corrupted and the device's HTTP service...
CVE-2013-3627: Undefined Security Weakness
FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent MA before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a denial of service service crash via a malformed HTTP request...
Moderate: Red Hat Security Advisory: httpd security and bug fix update
Updated httpd packages that fix multiple security issues and one bug are now available for JBoss Enterprise Web Server 1.0.2 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...
httpd: mod_proxy_ajp remote temporary DoS
The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...
CVE-2011-3348
The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...
CVE-2011-3348
The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...