CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

Null pointer dereference

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

CVE-2023-35298

HTTP.sys Denial of Service Vulnerability...

CVE-2023-32084

HTTP.sys Denial of Service Vulnerability...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

Siemens RUGGEDCOM ROX 加密问题漏洞

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A security vulnerability exists in the Siemens RUGGEDCOM ROX that stems from the affected device's web server supporting the insecure TLS 1.0 protocol...

CVE-2023-29984

The CVE-2023-29984 issue is a NULL POINTER DEREFERENCE affecting multiple Brother and Fuji Xerox/Fujifilm MFPs/printers that implement the Debut web server (versions 1.2–1.3). Processing a specially crafted request can cause a Denial-of-Service (DoS). Affected products/versions are vendor-specifi...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

PT-2023-22503 · Unknown · Debut Web Server

Name of the Vulnerable Software and Affected Versions: Debut web server versions 1.2 through 1.3 Description: A null pointer dereference issue exists, which can lead to a denial-of-service DoS condition when a specially crafted request is processed. The issue affects multiple vendors' MFPs and...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM WebSphere Application Server Liberty is vulnerable to spoofing - CVE-2022-39161

Summary IBM WebSphere Application Server Liberty are vulnerable to spoofing via the optional and separately installable Web Server Plug-ins for IBM WebSphere Application Server component. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addresse...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2023-35890)

Summary WebSphere Application Server, shipped with IBM WebSphere Remote Server, is vulnerable to spoofing when using Web Server Plug-ins. Information about a security vulnerability affecting WebSphere Application when using Web Server Plug-ins has been published in a security bulletin...

How to use the CLI to disable HTTP OPTIONS Method for virtual server

Some security scanning reports suggest to disable the OPTIONS HTTP Method on web server. The article provides the use of a rewrite policy to avoid processing the OPTIONS HTTP Method...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

PT-2023-14808 · Nexxt · Nexxt Nebula 1200-Ac

Name of the Vulnerable Software and Affected Versions: Nexxt Nebula 1200-AC version 15.03.06.60 Description: The issue allows authentication bypass and command execution by utilizing the HTTPD service to enable TELNET. Recommendations: For version 15.03.06.60, consider disabling the HTTPD service...

Vulnerability of web servers of microprogramming software: Siemens SICAM CP-8031 and CP-8050 control modules, allowing attackers to execute arbitrary code.

The vulnerability of the web server of the microprogramming software for the processor module controllers Siemens SICAM CP-8031 and CP-8050 is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

GHSA-X456-3CCM-M6J4 MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

Summary A malicious web server can read arbitrary files on the client using a inside HTML form. Details This affects the extremely common pattern of form submission: python b = mechanicalsoup.StatefulBrowser b.selectform... b.submitselected The problem is with the code in...

MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

Summary A malicious web server can read arbitrary files on the client using a inside HTML form. Details This affects the extremely common pattern of form submission: python b = mechanicalsoup.StatefulBrowser b.selectform... b.submitselected The problem is with the code in...

CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

PYSEC-2023-108

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...