1891 matches found
Microsoft IIS 404 Response Service Pack Signature
The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...
Trillian 0.74 - Remote Denial of Service
Trillian 0.74 - Remote Denial of Service / -------------------------------------------- :::::::::::::::::: trillian 0.7d patch :::::Denial:of:Service::simple:exploit:: -----------------------------l0bstah----- usage :: : trillah name attacked-nick comment:: after patch .74d, exploits, wich use...
phpLinks mail() abuse Vulnerability
phpLinks mail abuse Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.destiney.com Vendor : Could not be informed Host not found Mailed advisory: 09/01/20 Vender Response : None...
Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service
Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service // source: https://www.securityfocus.com/bid/5787/info Apache is prone to a denial of service condition when an excessive amount of data is written to stderr. This condition reportedly occurs when the amount of data written to stderr is...
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion source: https://www.securityfocus.com/bid/3292/info The Microsoft IIS web server supports a non-standard method of encoding web requests. Because this method is non-standard, intrusion detection systems ma...
cnn_unsubscribe_bot.txt
CNN List Un-Subscribe bot Date: 8/22/01 Author: Jay Daniels PROBLEM: Anyone can Un-Subscribe other users from CNN's distribution list by placing a random number at the end of unsubscribe cgi URL's memberid. CAUSE: There is no confirmation request! I can't remember if there is a confirmation reque...
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Gene6 BPFTP Server 2.0 - File Existence Disclosure source: https://www.securityfocus.com/bid/2537/info A user can confirm the existence and location of files and directory structure information, by submitting a 'size' or 'mdtm' command of a file. If the command is carried out by the vulnerable...
Дырка в Pegasus Mail
Если ссылки mailto: обрабатываются Pegasus Mail, то с помощью подобной ссылки можно отправить любой файл с компьютера пользователя по любому адресу без подтверждения пользователем...
kde.kmail.tmp.dir.txt
Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...
ie4.clipboard.txt
Date: Mon, 22 Feb 1999 23:39:07 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: New IE4 vulnerability : the clipboard again. Greetings, I have discovered another IE 4 clipboard vulnerability. The clipboard content can be made public by a very simple javascri...