PT-2021-22831

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Cloud Security Plus versions prior to Build 4117 Description The issue allows a CSRF attack on the server proxy settings. Recommendations For versions prior to Build 4117, update to Build 4117 or later to resolve the issue. A...

CVE-2021-40173: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

Bypass of Kubernetes API Server proxy TOCTOU

CVSS Rating: Low CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N A security issue was discovered in Kubernetes where an authorized user may be able to access private networks on the Kubernetes control plane components. Kubernetes clusters are only affected if an untrusted user can create or modify...

Moxa EDR-810 Information Disclosure Vulnerability

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. An information disclosure vulnerability exists in the server proxy feature of the Moxa EDR-810 V4.1 build 17030317. An attacker can exploit this...

[SECURITY] Fedora 28 Update: nghttp2-1.31.1-1.fc28

This package contains the HTTP/2 client, server and proxy programs...

CVE-2017-1381: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server Proxy Server or On-demand-router ODR 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152...

PT-2017-13122

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Proxy Server or On-demand-router ODR versions 7.0 through 9.0 Description The issue allows a local attacker to obtain sensitive information due to stale data being cached and then served. Recommendations For...

YaPiG 0.95b - Remote Code Execution

?php / \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : YaPIG 0.95b Vendor : http://yapig.sourceforge.net Author : Dj7xpl We Are : Y4Ho0 -Mr.Mithridates -Sir SiSiLi -System Failure -Satanic Soulfull -And Me Email : [email protected] Home :...

CVE-2006-3549

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via 1 http, 2 https, and 3 ftp URL in the url parameter...

CVE-2003-1159

Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service server crash via an invalid URI in an HTTP GET request to TCP port 8080...

CVE-2003-1159

Technical details about CVE-2003-1159 are not publicly provided in the attached documents. Monitor for updates.

CVE-2003-1159: Undefined Security Weakness

Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service server crash via an invalid URI in an HTTP GET request to TCP port 8080...

CVE-2004-0049: Undefined Security Weakness

Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...

CVE-2003-1159

Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service server crash via an invalid URI in an HTTP GET request to TCP port 8080...

PT-2003-1220 · Unknown · Db4Web Server

Name of the Vulnerable Software and Affected Versions: DB4Web server affected versions not specified Description: The issue allows remote attackers to use the DB4Web server as a proxy and attempt TCP connections to other systems, effectively performing a port scan. This is achieved by requesting ...

CVE-2000-0582: Undefined Security Weakness

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...