72 matches found
mod_auth_mellon 输入验证错误漏洞
modauthmellon is an authentication module used in Apache. A security vulnerability exists in modauthmellon. The vulnerability stems from mod auth mellon not properly clearing the logout url, which can be exploited by an attacker to trick a user into visiting a spoofed trusted web application URL...
Unable to access StoreFront URL, error “can’t reach this page”
• In this scenario, the customer just built a test site running Virtual Apps 1912CU1 • He built one DDC, 2 StoreFront servers, and aleady created a Site and a StoreFront Store • When attempting to access the StoreFront URL, he gets an error saying “can’t reach this page” • Using the StoreFront...
DEBIAN-CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2016-9283
SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...
Storefront 3.5 - Error: There are no apps or desktops available for you at this time
Storefront 3.5 - Unable to get any desktop show up using the URL of storefront...
HackerOne: File Name Enumeration
Hi guys, I am kind of surprised no one hast reported this issue yet. or maybe they have and due to the severity it was never patched? An example of this behavior would be: https://hackerone.com//%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd which is a valid attempt even though we get an error...
CVE-2009-3826
CVE-2009-3826 affects squidGuard 1.4 (URL redirector/filter/ACL for Squid). Technical details in connected docs show that multiple buffer overflows in squidGuard’s sgLog.c and sgDiv.c allow remote attackers to bypass URL blocking via long URLs, tied to the relationship between squidGuard buffer s...
CVE-2004-0989
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 libxml2, and possibly other versions, may allow remote attackers to execute arbitrary code via 1 a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, 2 a long proxy URL containing FTP data that is not properly handled...
CVE-2003-0907
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...
CVE-2001-0058
The CVE-2001-0058 issue affects Cisco 600 Series Routers running CBOS 2.4.1 and earlier, where the Web/HTTP interface can be forced into a denial-of-service by sending a request with a URL that does not end in a space character. The vulnerability is exposed via the Cisco CBOS web interface and is...
Security Bulletin (MS00-079)
Microsoft Security Bulletin MS00-079 - - -------------------------------------- Patch Available for "HyperTerminal Buffer Overflow" Vulnerability Originally posted: October 18, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the HyperTerminal...