220 matches found
Buffer overflow
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
CVE-2008-0234
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
CVE-2002-2318
CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...
CVE-2002-2318
Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...
CVE-2002-2246
Technical details are not publicly available in the provided documents. Monitor for updates.
Remove the space-list from the 404-error-page to reduce load on server
The default 404 page shows a list of spaces. On a big, busy instance this can generate a lot of load. The query is run on every 404 which can happen multiple times on a request if there are some bad resources missing css/js etc. Perhaps there should be some sort of throttling or configuration to...
Remove the space-list from the 404-error-page to reduce load on server
The default 404 page shows a list of spaces. On a big, busy instance this can generate a lot of load. The query is run on every 404 which can happen multiple times on a request if there are some bad resources missing css/js etc. Perhaps there should be some sort of throttling or configuration to...
HTTP SERVER (httpsv) 1.6.2 (GET 404) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl GetOpt STD module use IO::Socket; use Getopt::Std; getopts":i:p:",%args; ifdefined $argsi $ip = $argsi; ifdefined $argsp $port = $argsp; if!defined $argsi or !defined $argsp print "-----------------------------------------------------\n"; print...
Sami HTTP Server 2.0.1 (HTTP 404 - Object not found) DoS Exploit
Exploit for unknown platform in category dos / poc ================================================================ Sami HTTP Server 2.0.1 HTTP 404 - Object not found DoS Exploit ================================================================ !/usr/bin/env python import socket print...
Airmagnet management interfaces multiple vulnerabilities
Airmagnet management interfaces multiple vulnerabilities A management interface of AirMagnet Enterprise contains several middle-risk vulnerabilities. Vulnerabilities ranges from reflected and stored Cross-Site scripting to remote code execution and protection bypass. Smart Sensor Edge Sensor...
CVE-2006-5152
Cross-site scripting XSS vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032...
CVE-2006-4067
Cross-site scripting XSS vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 "Not Found" error page. NOTE: some of these details are obtained from third party information...
Path traversal
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2355
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2355
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2355
The CVE-2006-2355 entry concerns Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium. Public sources state a path-information disclosure via 404 error messages, enabling remote attackers to obtain full path details. OpenVAS/Nessus entries corroborate that Ipswitch WhatsUp Pro...
Response Time / No 404 Error Code Check
This VT tests if the remote web server does not reply with a 404 error code and checks if it is replying to the scanners requests in a reasonable amount of time. SPDX-FileCopyrightText: 2006 Renaud Deraison / HD Moore Some text descriptions might be excerpted from a referenced sources, and are...
FreeWPS 2.11 - images.php Remote Code Execution
FreeWPS 2.11 - images.php Remote Code Execution ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo...
CVE-2005-3424
Cross-site scripting XSS vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425...