12777 matches found
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal: Crossite scripting. E107: crossite scripting...
CVE-2009-0680: Improper Limitation of a Pathname to a Restricted Directory
cgi-bin/welcome/VPNonly in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service device crash via a crafted query string, as demonstrated using directory traversal sequences...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal: Crossite scripting...
i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability
Exploit for cgi platform in category web applications =============================================================== i-dreams GB 5.4 Final admin.dat File Disclosure Vulnerability ===============================================================...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Relay: HTTP response splitting, SQL injection, directory traversal...
Fedora Update for rubygem-rails FEDORA-2008-8282
Check for the Version of rubygem-rails OpenVAS Vulnerability Test Fedora Update for rubygem-rails FEDORA-2008-8282 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for adminutil FEDORA-2008-7339
Check for the Version of adminutil OpenVAS Vulnerability Test Fedora Update for adminutil FEDORA-2008-7339 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for fedora-ds-admin FEDORA-2008-3214
Check for the Version of fedora-ds-admin OpenVAS Vulnerability Test Fedora Update for fedora-ds-admin FEDORA-2008-3214 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Fedora Update for adminutil FEDORA-2008-7642
Check for the Version of adminutil OpenVAS Vulnerability Test Fedora Update for adminutil FEDORA-2008-7642 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Fedora Update for namazu FEDORA-2008-2678
Check for the Version of namazu OpenVAS Vulnerability Test Fedora Update for namazu FEDORA-2008-2678 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for awstats FEDORA-2008-10962
Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2009-0545
cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2009-0545: Improper Input Validation
cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...
HP OpenView Network Node Manager ovlaunch.exe Information Disclosure (c01661610)
The 'ovlaunch.exe' CGI script included with the version of HP OpenView Network Node Manager installed on the remote host reveals various configuration details in response to a specially crafted request. An unauthenticated, remote attacker could leverage this information to launch further attacks...
3Com OfficeConnect Wireless Cable/DSL路由器SaveCfgFile绕过认证漏洞
BUGTRAQ ID: 33686 3Com OfficeConnect Wireless Cable/DSL是一款小型的无线路由器。 OfficeConnect Wireless Cable/DSL路由器默认启用了一个Web控制台以便于设备管理。即使http守护程序不允许未经认证便访问HTML页面和Web控制台，仍可以调用并执行已有的CGI程序。System Tools--Configuration--Backup Configuration功能将实际的配置文件保存到了名为config.bin的纯文本文件中，未经认证的用户可以直接调用SaveCfgFile...
CVE-2009-0469
Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unknown vectors...
