USN-5069-1: mod-auth-mellon vulnerability

It was discovered that mod-auth-mellon incorrectly filtered certain URLs. A remote attacker could possibly use this issue to perform an open redirect attack...

USN-5069-1 libapache2-mod-auth-mellon vulnerability

It was discovered that mod-auth-mellon incorrectly filtered certain URLs. A remote attacker could possibly use this issue to perform an open redirect attack...

Ubuntu 21.04 : mod-auth-mellon vulnerability (USN-5069-2)

The remote Ubuntu 21.04 host has a package installed that is affected by a vulnerability as referenced in the USN-5069-2 advisory. USN-5069-1 fixed a vulnerability in mod-auth-mellon. This update provides the corresponding updates for Ubuntu 21.04. Tenable has extracted the preceding description...

Ubuntu 18.04 LTS / 20.04 LTS : mod-auth-mellon vulnerability (USN-5069-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5069-1 advisory. It was discovered that mod-auth-mellon incorrectly filtered certain URLs. A remote attacker could possibly use this issue to perform an open redirect...

DEBIAN-CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

PT-2021-22446

Name of the Vulnerable Software and Affected Versions mod auth openidc versions prior to 2.4.9.4 Description The mod auth openidc module for the Apache 2.x HTTP server is vulnerable to an open redirect attack. This occurs when a crafted URL is supplied in the target link uri parameter, affecting...

CVE-2021-39320

The underConstruction plugin = 1.18 for WordPress echoes out the raw value of $GLOBALS'PHPSELF' in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the...

PT-2021-10501

Name of the Vulnerable Software and Affected Versions: libiec iccp mod version 1.5 Description: A heap buffer-overflow in the client example1.c component leads to a denial of service DOS. Recommendations: For libiec iccp mod version 1.5, consider disabling the client example1.c component as a...

Mz Automation Libiec61850 缓冲区错误漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. Mz Automation Libiec61850 A buffer error vulnerability exists in libieciccpmod version 1.5, which stems from a heap buffer overflow vulnerability in the client example1.c component of the libiec icc...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:1199-1 Rating: moderate References: 1182345 1189162 Cross-References: CVE-2021-36221 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available.Description...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete...

CVE-2021-28070

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete...

CVE-2021-28070

CVE-2021-28070 describes a Cross-Site Request Forgery (CSRF) vulnerability in PopojiCMS 2.0.1, specifically in po-admin/route.php?mod=user&act=multidelete. The connected Red Hat, CNVD, CNVD-like and other listings confirm the same issue but do not provide concrete exploit details in these documen...

CVE-2020-18065

Cross Site Scripting XSS vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu...

Request splitting via HTTP/2 method injection and mod_proxy

...

PT-2021-10122

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: A Cross Site Scripting XSS issue exists in the admin.php module, specifically when editing menus through the mod=menumanager parameter. This allows for potential malicious script execution. Recommendations...

The vulnerability of the mod_proxy httpd daemon in the Apache HTTP Server allows a hacker to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the modproxy module in the Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

PT-2021-17734

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: A Cross Site Request Forgery CSRF issue exists, which can be exploited through the /po-admin/route.php?mod=user&act=multidelete API endpoint. This allows for potentially unauthorized actions on user...

DEBIAN-CVE-2021-33193

A crafted method sent through HTTP/2 will bypass validation and be forwarded by modproxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48...