125 matches found
Design/Logic Flaw
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2629...
CVE-2014-2629
The CVE-2014-2629 issue affects HP NonStop Safeguard Security Software G and the J/K release branches (G: H06.03–H06.28.01; J: J06.03–J06.17.01). The vulnerability arises from improper evaluation of the DISKFILE-PATTERN ACL on a program object file, allowing remote authenticated users to bypass i...
Axous 1.1.1 - Multiple Vulnerabilities (CSRF - Persistent XSS)
No description provided by source. +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software...
CVE-2013-2629
Leed (Light Feed) before 1.5 Stable is affected by CVE-2013-2629 through an authentication bypass in action.php, enabling remote attackers to access functions such as importForm, importFeed, addFavorite, and removeFavorite without proper user verification. The issue is part of a set of vulnerabil...
Debian: Security Advisory (DSA-2629-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
+-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...
CVE-2011-2629
Opera prior to 11.11 contains an unspecified vulnerability that can cause a denial of service (application crash) by processing certain web page content. This CVE is referenced in Red Hat and SUSE advisories and appears in OpenVAS/GLSA coverage as part of multiple Opera vulnerabilities. Remediati...
Opera < 11.11 Multiple Vulnerabilities
Binary data 5925.prm...
Opera < 11.11 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.11. Such versions are potentially affected by: - A memory corruption vulnerability exists. The application does not properly handle specific framesets when unloading a page. An attacker could craft a web page that will...
nginx HTTP Request Remote Buffer Overflow Vulnerability
nginx is prone to a buffer-overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx"; ifdescription...
nginx v0.6.38 Heap Corruption Exploit
No description provided by source. !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole [email protected] Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: = 0.6.38, = 0.7.61 Tested on: BT4R1 running nginx 0.6.38 locally CVE: 2009-26...
Nginx 0.6.38 - Heap Corruption
Nginx 0.6.38 - Heap Corruption !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one wit...
CVE-2009-2629
creationtimestamp| type| source ---|---|--- 2010-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14830...
nginx v0.6.38 Heap Corruption Exploit
Exploit for linux platform in category remote exploits ===================================== nginx v0.6.38 Heap Corruption Exploit ===================================== !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link:...
Nginx 0.6.38 - Heap Corruption
!/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one with "GET //../Aa0" and add 131 to...
CVE-2010-2629
CVE-2010-2629 and CVE-2010-1576 describe HTTP header handling flaws in Cisco CSS 11500 and ACE 4710, enabling HTTP request smuggling via LF/CRLF header terminators and potential header spoofing of ClientCert-* fields when GET lines are CRLF-terminated and mixed newline sequences occur. The issue ...
nginx URI Parsing Buffer Underflow (CVE-2009-2629)
A remote buffer underflow vulnerability exists within nginx HTTP server. The vulnerability is due to an error when processing malicious HTTP requests. A remote attacker can exploit this vulnerability by sending an HTTP request containing specially crafted URI to the target system. Successful...
Fedora Core 11 FEDORA-2009-12782 (nginx)
The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 10 FEDORA-2009-12775 (nginx)
The remote host is missing an update to nginx announced via advisory FEDORA-2009-12775. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 12 FEDORA-2009-12750 (nginx)
The remote host is missing an update to nginx announced via advisory FEDORA-2009-12750. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...