374 matches found
tomcat security, bug fix, and enhancement update
0:7.0.69-10 - Related: rhbz1368122 0:7.0.69-9 - Resolves: rhbz1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - Resolves: rhbz1368122 0:7.0.69-7 - Resolves: rhbz1362545 0:7.0.69-6 - Related: rhbz1201409 Added /etc/sysconfig/tomcat to the systemd unit fo...
sNews CMS 1.7 Shell Upload
Exploit Title : Snews CMS upload sheller Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 04/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link : http://snewscms.com/download/snews1.7.1.zip Version : 1.7latest 3...
MGASA-2016-0317 Updated golang package fixes security vulnerability
Updated golang packages fix security vulnerability: Go: sets environmental variable based on user supplied Proxy request header CVE-2016-5386...
Updated golang package fixes security vulnerability
Updated golang packages fix security vulnerability: Go: sets environmental variable based on user supplied Proxy request header CVE-2016-5386...
WS-2016-7104
In “Cloudera/Hue”, versions v0.9.1 to v3.10.0, web server information is disclosed in the HTTP request header...
HTTP 'Referer' Request Header Detection
Binary data 8999.prm...
HTTP GET Without 'Referer' Request Header Detection
Binary data 8997.prm...
CVE-2015-5220
The Web Console in Red Hat Enterprise Application Platform EAP before 6.4.4 and WildFly formerly JBoss Application Server allows remote attackers to cause a denial of service memory consumption via a large request header...
CVE-2015-5220
The Web Console in Red Hat Enterprise Application Platform EAP before 6.4.4 and WildFly formerly JBoss Application Server allows remote attackers to cause a denial of service memory consumption via a large request header...
CVE-2015-5220: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Web Console in Red Hat Enterprise Application Platform EAP before 6.4.4 and WildFly formerly JBoss Application Server allows remote attackers to cause a denial of service memory consumption via a large request header...
HTTP 'Host' Request Header Detection
Binary data 8314.prm...
CVE-2014-9304
Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system/proxy, which are inconsistently processed by the request handler in the backend web...
Launching ServiceWorker without breaking the web
Update: Thanks to everyone who read and commented, you influenced the direction of the API. We're going for B, the path-based method, but allowing a header to relax these rules so you can put your worker script wherever you want. Many thanks! With ServiceWorkers you can control requests to any pa...
PT-2014-2712
Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon versions prior to 1.2.1 Description The issue is a stack-based buffer overflow in the mk request header process function, located in mk request.c. This allows remote attackers to potentially cause a denial of service,...
UBUNTU-CVE-2013-5704
The modheaders module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."...
PT-2020-5629
Name of the Vulnerable Software and Affected Versions Open Connectivity Foundation UPnP specification versions prior to 2020-04-17 4thline cling versions 2.0.0 through 2.1.2 Description The issue is related to the UPnP protocol, which allows remote attackers to cause a denial of service via an...
DEBIAN-CVE-2013-7039
Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long URI in an authentication header...
Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730) - ver 2
A code execution vulnerability exists in Microsoft Internet Information Services IIS...
SuSE 11.2 / 11.3 Security Update : Apache2 (SAT Patch Numbers 8137 / 8138)
This collective update for Apache provides the following fixes : - Make sure that input that has already arrived on the socket is not discarded during a non-blocking read read2 returns 0 and errno is set to -EAGAIN. bnc815621 - Close the connection just before an attempted re-negotiation if data...