PT-2021-1392

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.48 and earlier Description: A crafted request uri-path can cause mod proxy to forward the request to an origin server chosen by the remote user. This issue is related to insufficient validation of incoming...

PT-2020-11912 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 12.8.2 Description: The issue allows information disclosure due to badge images not being proxied, resulting in mixed content warnings and the leakage of the user's IP address. Recommendations: For versions prior to...

PT-2016-4689

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 8.5.3-055, 9.1.0-000, 9.5.0-235 Description The issue allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method. Recommendations For versions 8.5.3-055, 9.1.0-000, and...

CVE-2016-1296: Undefined Security Weakness

The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...

CVE-2000-0416: Undefined Security Weakness

NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server...