PYSEC-2026-1098 aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

Summary An attacker can send a specially crafted POST multipart/form-data request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further requests. Impact An attacker can stop the application from serving requests after sending a single...

Brother Printers Debut Embedded HTTP Server Denial of Service (CVE-2017-16249)

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying 300 seconds with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web...

EUVD-2001-0374

Malware in sbrugna...

EUVD-2009-0068

Malware in sbrugna...

CVE-2021-40711: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager version 6.5.9.0 and earlier is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2016-2961: Exposure of Sensitive Information to an Unauthorized Actor

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...

CGIScript.net 1.0 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4764/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. It is possible to cause numerous scripts provided by CGIScript.net to disclose sensitive system...

Cross site request forgery (csrf)

The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service device reload via a web...

Helix Universal Server Remote Integer Handling DoS

The remote host is running Helix Universal Server, a digital media delivery platform. There is a flaw in the remote version of this software that could allow an attacker to crash this service by sending a malformed POST request to the remote host. C Tenable Network Security, Inc...

Xitami Malformed POST Request Infinite Loop Remote DoS

The remote host is running a vulnerable version of the Xitami web server. It is possible to freeze the remote web server by sending a malformed POST request. This is known to affect Xitami versions 2.5 and earlier. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11934;...

[Full-Disclosure] Xitami Denial of Service in Handling malformed request

Xitami Denial of Service in Handling malformed request ================================================= PROGRAM: Xitami HOMEPAGE: http://www.xitami.com VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= LiteServe is a very powerful, full-featured,...

Moby NetSuite 1.01.2 - POST Handler Buffer Overflow

Moby NetSuite 1.01.2 - POST Handler Buffer Overflow source: https://www.securityfocus.com/bid/6277/info A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST...

Moby NetSuite 1.0/1.2 - POST Handler Buffer Overflow

source: https://www.securityfocus.com/bid/6277/info A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST request is received. An attacker can exploit this...

IPSwitch IMail Advisory #2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory 6 PRODUCT IPSwitch IMail, All Current Versions VULNERABILITY the IMail Web Calendaring service, iwebcal, can be crashed by issuing a malformed POST request.. specifically one that neglects to include ...

CVE-2001-0377

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string...

CVE-2001-0377: Undefined Security Weakness

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string...

CVE-2001-0377

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string...

Infinite InterChange DoS

Strumpf Noir Society Advisories ! Public release ! -- -= Infinite InterChange DoS =- Release date: Thursday, 21 December, 2000 Introduction: Infinite InterChange is a Win95/98/NT/2k mailserver for organizations that need to expand their network messaging. Infinite InterChange has many functions,...