IBM Lotus Domino Crafted .nsf Request Authentication Bypass

By creating a specially crafted URL, the authentication mechanism of the Domino database can be circumvented. These URLs should look like : http://host.com/.ntf.nsf/ in which has a certain length. %NASLMINLEVEL 70300 This script was written by Davy Van De Moere - CISSP [email protected] See the...

Messagerie 1.0 - Arbitrary User Removal Denial of Service

Messagerie 1.0 - Arbitrary User Removal Denial of Service source: https://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts...

Messagerie 1.0 - Arbitrary User Removal Denial of Service

source: https://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts. Reportedly, submitting a specially crafted URL will successfully...

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing ------ Risk: POTENTIALLY HIGH. Potentially allowing any possible action on the client machine, including reading any file, placing Trojan code or altering data. The risk depends on the security settings in the 'Intranet zone'...

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service source: https://www.securityfocus.com/bid/2715/info Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9. A user may craft a URL which contai...

Michael Lamont Savant Web Server 3.0 - Denial of Service

Michael Lamont Savant Web Server 3.0 - Denial of Service source: https://www.securityfocus.com/bid/2468/info A denial of service condition exists in Michael Lamont Savant web server. Requesting a specially crafted URL composed of '%' characters could cause the server to stop responding...

Michael Lamont Savant Web Server 3.0 - Denial of Service

source: https://www.securityfocus.com/bid/2468/info A denial of service condition exists in Michael Lamont Savant web server. Requesting a specially crafted URL composed of '%' characters could cause the server to stop responding. www.target/%%%...

Robin Twombly A1 HTTP Server 1.0 - Directory Traversal

Robin Twombly A1 HTTP Server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2436/info It is possible for a remote user to gain read access to directories and files outside the web root. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary...

Robin Twombly A1 HTTP Server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2436/info It is possible for a remote user to gain read access to directories and files outside the web root. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary directory, appending the known filename will disclose t...

Working Resources BadBlue 1.2.7 - Full Path Disclosure

Working Resources BadBlue 1.2.7 - Full Path Disclosure source: https://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening...

Working Resources BadBlue 1.2.7 - Denial of Service

Working Resources BadBlue 1.2.7 - Denial of Service source: https://www.securityfocus.com/bid/2392/info It is possible for a remote user to cause a denial of service condition in Working Resources BadBlue. Requesting a specially crafted URL composed of 284 or more bytes, will cause the server to...

Working Resources BadBlue 1.2.7 - Full Path Disclosure

source: https://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program files\badblue\pe\default.htx 2...

thinking arts es.one 1.0 - Directory Traversal

thinking arts es.one 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../'...

thinking arts es.one 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../' sequences and appended with '%00' will disclose an...

carey internets services commerce.cgi 2.0.1 - Directory Traversal

source: https://www.securityfocus.com/bid/2361/info It is possible for a remote user to gain read access to directories and files outside the root directory of Carey Internet Services Commerce.cgi. Requesting a specially crafted URL composed of '/../%00' along with the known filename or directory...

SilverPlatter WebSPIRS 3.3.1 - File Disclosure

source: https://www.securityfocus.com/bid/2362/info A remote user could gain read access to known files outside of the root directory where SilverPlatter WebSPIRS resides. Requesting a specially crafted URL composed of '../' sequences along with the known filename will disclose the requested file...

Way-Board 2.0 - File Disclosure

Way-Board 2.0 - File Disclosure source: https://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclose...

soft lite serverworx 3.0 - Directory Traversal

soft lite serverworx 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/2346/info It is possible for a remote user to gain read access to directories and files outside the root directory of ServerWorx. Requesting a specially crafted URL composed of '../' or '.../' sequences will...

Heat-On HSWeb Web Server 2.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/2336/info Requesting a specially crafted URL will make it possible for a remote attacker to disclose the physical path to the web root and peruse the entire directory listing. http://target/cgi/...

Heat-On HSWeb Web Server 2.0 - Full Path Disclosure

Heat-On HSWeb Web Server 2.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/2336/info Requesting a specially crafted URL will make it possible for a remote attacker to disclose the physical path to the web root and peruse the entire directory listing. http://target/cgi/...