Apache 2.2.15 DLL Hijacking Exploit (lPK.dll)

Exploit for windows platform in category local exploits ============================================= Apache 2.2.15 DLL Hijacking Exploit lPK.dll ============================================= / Exploit Title: Apache 2.2.15 DLL Hijacking Exploit lPK.dll Date: Octobre 6, 2010 Author: Mu$lim...

Apache 2.2.15 DLL Hijacking Exploit (lPK.dll)

No description provided by source. ============================================= Apache 2.2.15 DLL Hijacking Exploit lPK.dll ============================================= / Exploit Title: Apache 2.2.15 DLL Hijacking Exploit lPK.dll Date: Octobre 6, 2010 Author: Mu$lim [email protected] Version:...

Fedora 13 : httpd-2.2.15-1.fc13 (2010-5942)

The Apache HTTP Server Project is proud to announce the release of version 2.2.15 of the Apache HTTP Server 'httpd'. This version is principally a security and bugfix release. Notably, this release was updated to reflect the OpenSSL Project's release 0.9.8m of the openssl library, and addresses...

Fedora 12 : httpd-2.2.15-1.fc12.2 (2010-6055)

The Apache HTTP Server Project is proud to announce the release of version 2.2.15 of the Apache HTTP Server 'httpd'. This version is principally a security and bugfix release. This release fixes two minor security issues and includes a number of bug fixes. See the upstream changes file for furthe...

Fedora 11 : httpd-2.2.15-1.fc11.1 (2010-6131)

The Apache HTTP Server Project is proud to announce the release of version 2.2.15 of the Apache HTTP Server 'httpd'. This version is principally a security and bugfix release. Notably, this release was updated to reflect the OpenSSL Project's release 0.9.8m of the openssl library, and addresses...

Apache Httpd < 2.2.16 : Timeout detection flaw (mod_proxy_http)

An information disclosure flaw was found in modproxyhttp in versions 2.2.9 through 2.2.15, 2.3.4-alpha and 2.3.5-alpha. Under certain timeout conditions, the server could return a response intended for another user. Only Windows, Netware and OS2 operating systems are affected. Only those...

PmWiki Table Feature 'width' Parameter Cross-site scripting vulnerability

The host is running PmWiki and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbpmwikixssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ PmWiki Table Feature 'width' Parameter Cross-site scripting vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

PmWiki < 2.2.16 XSS Vulnerability

PmWiki is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Cross site scripting

Cross-site scripting XSS vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute...

PmWiki 2.2.15 width参数跨站脚本漏洞

BUGTRAQ ID: 39994 CVECAN ID: CVE-2010-1481 PmWiki是一种基于Wiki技术的开源多人协作站点创建和维护工具。 PmWiki在创建表格时没有正确地过滤通过width标记所传送的参数便显示给了用户，远程攻击者可以通过提交恶意参数请求注入任意HTML和脚本代码，但用户查看恶意数据时就会在浏览器会话中执行所注入的代码。 Patrick Michaud PmWiki 2.2.15 厂商补丁： Patrick Michaud --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2010-1481

The CVE-2010-1481 entry concerns the PmWiki table feature vulnerability in PmWiki 2.2.15. The root cause is that the width parameter is not properly escaped, allowing XSS to be injected by remote authenticated users via the table width attribute. Affected software: PmWiki 2.2.15. Impact: cross-si...

CVE-2010-1481

Cross-site scripting XSS vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute...

Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002

Apache modisapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002 Release Date. 5-Mar-2010 Last Update. - Vendor Notification Date. 9-Feb-2010 Product. Apache HTTP Server Platform. Microsoft Windows Affected versions. 2.2.14 verified and possibly others. Severity Rating. High Impact...

Apache mod_isapi module library unload results in orphaned callback pointers

Overview The Apache modisapi module can be forced to unload a specific library before the processing of a request is complete, resulting in memory corruption. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP server running on Windows platforms...

CVE-2010-0434

The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...

Fedora 7 : gimp-2.2.15-3.fc7 (2007-0725)

Wed Jun 27 2007 Nils Philippsen - 2:2.2.15-3 - refuse to open PSD files with insanely large dimensions 244402, fix by Sven Neumann - Wed Jun 13 2007 Nils Philippsen - 2:2.2.15-2 - require gutenprint-plugin or gimp-print-plugin 243593 - Thu May 31 2007 Nils Philippsen - 2:2.2.15-1 - version 2.2.15...

Integer overflow

Integer overflow in the seektoandunpackpixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large 1 width or 2 height value...

CVE-2007-2949

Integer overflow in the seektoandunpackpixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large 1 width or 2 height value...

Fedora Core 6 : gimp-2.2.15-3.fc6 (2007-619)

Wed Jun 27 2007 Nils Philippsen - 2:2.2.15-3 - refuse to open PSD files with insanely large dimensions 244402, fix by Sven Neumann - Wed Jun 13 2007 Nils Philippsen - 2:2.2.15-2 - require gutenprint-plugin or gimp-print-plugin 243593 Note that Tenable Network Security has extracted the preceding...