CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

Design/Logic Flaw

ACME minihttpd before 1.30 lets remote users read arbitrary files...

UBUNTU-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME mini_httpd before 1.30 is vulnerable to local file inclusion (LFI) via HTTP handling, enabling a remote attacker to read arbitrary files on the server. The issue is described as improper handling of HTTP GET requests with empty headers, facilitating file read access. Affected software: ACME ...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

ACME mini_httpd Arbitrary File Read Vulnerability

ACME minihttpd is a small HTTP server from ACME Labs. A security vulnerability exists in ACME minihttpd versions prior to 1.30. A remote attacker can exploit this vulnerability to read arbitrary files...

Microsoft Adds Direct Trust for Let’s Encrypt

Microsoft has added direct trust for Let’s Encrypt certificates, meaning that all major browsers and operating systems, including Apple, Blackberry, Google, Microsoft, Mozilla and Oracle, now all directly trust the Let’s Encrypt root, ISRG Root X1. Let’s Encrypt provides free digital certificates...

acme-world.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626939 Description| Value ---|--- Affected Website:| acme-world.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

thttpd Detection

Detection of thttpd. The script sends a connection request to the server and attempts to detect thttpd and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Acme CADSee Handles TIFF Files with Denial of Service Vulnerability

Acme CADSee is a specialized viewer for CAD drawing files. Acme CADSee suffers from a memory corruption vulnerability when handling TIFF format files, which can cause an attacker to crash the program by constructing a TIFF format file, and if successfully exploited, can cause arbitrary code...

Memory Corruption Vulnerability in Acme CADSee's Handling of BMP Files

Acme CADSee is a specialized viewer for CAD drawing files. Acme CADSee suffers from a memory corruption vulnerability in the handling of BMP format files, which can be exploited to cause an attacker to crash the program by constructing a malformed BMP format file that can be successfully exploite...

Good News from Singapore

The IETF had its 100th meeting the week of November 13. It was held in Singapore. I want to report on two pieces of good news. The first is that it seems like TLS 1.3 is ready to advance through the IETF process. As I wrote last month, the problem was that outdated or buggy network devices betwee...

acmejewel.com XSS vulnerability

Vulnerable URL: http://www.acmejewel.com/product.php?page=1%22%27--!%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E=216==%20pid%20desc Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Let's Encrypt to Offer Wildcard Certificates in 2018

Certificate authority Let’s Encrypt said this week it will begin offering wildcard certificates in 2018. Wildcard certificates are public key certificates that can be used with multiple subdomains of a domain. The certificates are traditionally viewed as less expensive and more convenient by...

Denial Of Service (DoS)

github.com/hlandau/acme is vulnerable to denial of service DoS attacks. A malicious user can have multiple clients connect to the redirector system and crash it because the redirector does not have a timeout...

Acme thttpd Detection

Binary data acmethttpddetect.nbin...

Acme thttpd < 2.26 Multiple Vulnerabilities

According to its banner, the version of Acme thttpd server running on the remote host is prior to 2.26. It is, therefore, affected by multiple vulnerabilities : - Multiple buffer overflow conditions exist in the htpasswd utility. A local attacker can exploit these, by calling htpasswd and supplyi...