Novell iPrint Client Netscape/ActiveX Location Header Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. Authentication is not required to exploit this vulnerability. The flaw exists within the nipplib.dll component which is used by both the Mozilla and IE browser plugins for...

CVE-2002-2318

CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...

CVE-2002-2318

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

CVE-2002-2318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

HP Tru64 Alpha OSF1 5.1 - ps Information Leak

HP Tru64 Alpha OSF1 5.1 - ps Information Leak !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to...

Null pointer dereference

The CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service application crash via a crafted HTTP 301 response, which results in a NULL pointer dereference...

CVE-2007-0464

The CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service application crash via a crafted HTTP 301 response, which results in a NULL pointer dereference...

CVE-2007-0464

The CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service application crash via a crafted HTTP 301 response, which results in a NULL pointer dereference...

CVE-2007-0464: Improper Restriction of Operations within the Bounds of a Memory Buffer

The CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service application crash via a crafted HTTP 301 response, which results in a NULL pointer dereference...

Apple CFNetwork HTTP Response Denial of Service Exploit (rb code)

Exploit for macOS platform in category dos / poc ================================================================= Apple CFNetwork HTTP Response Denial of Service Exploit rb code ================================================================= !/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof...

CVE-2006-5233

Polycom SoundPoint IP 301 VoIP Desktop Phone running firmware version 1.4.1.0040 is affected. The vulnerability allows remote attackers to cause a denial of service (reboot) by sending a long URL to the device’s HTTP daemon and through unspecified manipulations demonstrated by the Nessus http_fin...

CVE-2006-5233: Undefined Security Weakness

Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service reboot via 1 a long URL sent to the HTTP daemon and 2 unspecified manipulations as demonstrated by the Nessus httpfingerprintinghmap.nasl script...

[Full-disclosure] (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42

Title: PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 Version: 1.4.1.0040 Issues: 1.Phone reboots from the Nessus httpfingerprintinghmap.nasl script. 2.Phone reboots from a long URL sent to the HTTP daemon 3.Undocumented open port TCP/42 returns “Halt! Who goes...

Debian DSA-301-1 : libgtop - buffer overflow

The gtop daemon, used for monitoring remote machines, contains a buffer overflow which could be used by an attacker to execute arbitrary code with the privileges of the daemon process. If started as root, the daemon process drops root privileges, assuming uid and gid 99 by default. This bug was...

Cross-Site Scripting Issues in Falcon Web Server

From Developer: "Falcon Web Server is running under Windows NT/2000/XP as well as Windows 95/98. It supports ISAPI and WinCGI, and it is a fully functional web server which is capable of running a small / medium scale website of about 50-80 hits per minute. The real advantage of Falcon Web Server...