CWE-1385 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1385/ Sun, 26 Feb 2023 06:50:48 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-1385 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1385/ 32 32 CVE-2018-6651 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6651/ Sun, 26 Feb 2023 06:50:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6651/ In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full control over the victim’s computer.

The post CVE-2018-6651 appeared first on CVE Vulnerability.

]]> In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full control over the victim’s computer.

The post CVE-2018-6651 appeared first on CVE Vulnerability.

]]> CVE-2018-14730 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14730/ Sun, 26 Feb 2023 06:46:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14730/ An issue was discovered in Browserify-HMR. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.

The post CVE-2018-14730 appeared first on CVE Vulnerability.

]]> An issue was discovered in Browserify-HMR. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.

The post CVE-2018-14730 appeared first on CVE Vulnerability.

]]> CVE-2018-14731 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14731/ Sun, 26 Feb 2023 06:46:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14731/ An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1 connection (with a random TCP […]

The post CVE-2018-14731 appeared first on CVE Vulnerability.

]]> An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1 connection (with a random TCP port number) from any origin. The random port number can be found by connecting to http://127.0.0.1 and reading the “new WebSocket” line in the source code.

The post CVE-2018-14731 appeared first on CVE Vulnerability.

]]> CVE-2018-14732 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14732/ Sun, 26 Feb 2023 06:46:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14732/ An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin.

The post CVE-2018-14732 appeared first on CVE Vulnerability.

]]> An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin.

The post CVE-2018-14732 appeared first on CVE Vulnerability.

]]> CVE-2020-25095 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25095/ Sun, 26 Feb 2023 06:39:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25095/ LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CSWH). If a logged-in PM user visits a malicious site in the same browser session, that site can perform a CSRF attack to create a WebSocket from the victim client to the vulnerable PM server. Once the socket is […]

The post CVE-2020-25095 appeared first on CVE Vulnerability.

]]> LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CSWH). If a logged-in PM user visits a malicious site in the same browser session, that site can perform a CSRF attack to create a WebSocket from the victim client to the vulnerable PM server. Once the socket is created, the malicious site can interact with the vulnerable web server in the context of the logged-in user. This can include WebSocket payloads that result in command execution.

The post CVE-2020-25095 appeared first on CVE Vulnerability.

]]>