CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

nginx is prone to remote source-code-disclosure and denial of service vulnerabilities. An attacker can exploit these vulnerabilities to view the source code of files in the context of the server process or cause denial-of- service conditions. nginx 0.8.36 for Windows is vulnerable; other versions...

nginx <= 0.8.36 Remote Source Code Disclosure and DoS Vulnerabilities

nginx is prone to remote source code disclosure and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

UnrealIRCd: Multiple vulnerabilities

Background UnrealIRCd is an Internet Relay Chat IRC daemon. Description Multiple vulnerabilities have been reported in UnrealIRCd: The vendor reported a buffer overflow in the user authorization code CVE-2009-4893. The vendor reported that the distributed source code of UnrealIRCd was compromised...

Litespeed Technologies - Web Server Remote Poison Null Byte

Litespeed Technologies Web Server Remote Poison null byte Zero-Day discovered and exploited by Kingcope in June 2010 google gives me over 9million hits Example exploit session: %nc 192.168.2.19 80 HEAD / HTTP/1.0 HTTP/1.0 200 OK Date: Sun, 13 Jun 2010 00:10:38 GMT Server: LiteSpeed . %cat...

Litespeed Technologies - Web Server Remote Poison Null Byte

Litespeed Technologies - Web Server Remote Poison Null Byte Litespeed Technologies Web Server Remote Poison null byte Zero-Day discovered and exploited by Kingcope in June 2010 google gives me over 9million hits Example exploit session: %nc 192.168.2.19 80 HEAD / HTTP/1.0 HTTP/1.0 200 OK Date: Su...

Litespeed Technologies Web Server Remote Poison null byte Exploit

Exploit for multiple platform in category remote exploits ================================================================= Litespeed Technologies Web Server Remote Poison null byte Exploit ================================================================= Litespeed Technologies Web Server Remote...

Yamamah - news SQL Injection Source Code Disclosure

Yamamah - news SQL Injection Source Code Disclosure Exploit Title: Yamamah Vulnerability news SQL Injection / disclosure Vulnerability Date: 12-06-2010 Author: anT!-Tr0J4n My Home : www.Dev-PoinT.com Software Link:http://www.yamamah.org Version: 1.00 Tested on: Win7/Linux DorK : N / A ==========...

Yamamah - 'news' SQL Injection / Source Code Disclosure

Exploit Title: Yamamah Vulnerability news SQL Injection / disclosure Vulnerability Date: 12-06-2010 Author: anT!-Tr0J4n My Home : www.Dev-PoinT.com Software Link:http://www.yamamah.org Version: 1.00 Tested on: Win7/Linux DorK : N / A ========== Exploit By anT!-Tr0J4n============ =======Yamamah...

nginx engine x server <= 0.7.65 stable/0.8.39 (development) source code

Exploit for windows platform in category remote exploits ================================================================================================================= NGINX ENGINE X SERVER http://nginx.org/en/ ref-1 ======TESTED VERSIONS===== Unix versions are not vulnerable it only affects t...

Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download

TITLE: NGINX ENGINE X SERVER http://nginx.org/en/ ref-1 ======TESTED VERSIONS===== Unix versions are not vulnerable it only affects to NTFS file system Windows Stable versions: nginx/0.7.66 -- Not vulnerable nginx/0.7.65 -- Vulnerable nginx/0.7.64 -- Vulnerable nginx/0.7.63 -- Vulnerable...

DaLogin - Multiple Vulnerabilities

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

QuickTalk 1.2 Information Disclosure

======================================================================= QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

nginx information leak

It's possible to access page source code by adding 20 to URI...

QuickTalk 1.2 - Source Code Disclosure

======================================================================= QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

QuickTalk 1.2 - Source Code Disclosure

QuickTalk 1.2 - Source Code Disclosure ======================================================================= QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities =======================================================================...

nginx Space String Remote Source Code Disclosure Vulnerability

nginx is prone to a remote source code-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects nginx...

QuickTalk v1.2 (Source code disclosure) Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================================ QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ================================================================...

nginx Space String Remote Source Code Disclosure Vulnerability

nginx is prone to a remote source code-disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nginx 0.8.35 Source Code Disclosure

Securitylab.ir Application Info: Name: Nginx Tested on nginx 0.8.35 Nginx 0.8.36 and higher is not vulnerable Vulnerability Info: Type: Remote File Disclosure Risk: High Vulnerability: http://localhost/file.php%20 Discoverd By: Pouya Daneshmand Website: http://Pouya.Securitylab.ir Contacts:...