CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

Authentication flaw

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

CVE-2008-4133

CVE-2008-4133 affects the web proxy service in D-Link DIR-100 devices with firmware 1.12 or earlier. The issue is improper filtering of web requests containing large URLs, enabling remote attackers to bypass web-restriction filters. The vulnerability is documented in NVD and appears across multip...

CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

CVE-2008-3539

Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...

D-Link DIR-100安全绕过漏洞

BUGTRAQ ID: 31050 CNCAN ID：CNCAN-2008090902 D-Link DIR-100是一款路由器设备。 D-Link DIR-100 URL过滤器实现存在错误，远程攻击者可以利用漏洞绕过安全限制访问受限资源。 D-Link DIR-100包含的WEB代理的URL过滤器可阻止WEB站点，攻击者可以增加超长字符串给URL可访问原来被禁止的资源。 D-Link DIR-100 1.12 目前没有解决方案提供：...

HP OpenView Select Identity Connectors本地信息泄漏漏洞

BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...

D-Link DIR-100 URL filtering bypass

Filtering doesn't work for oversized URLs...

[scip_Advisory 3808] D-Link DIR-100 long url filter evasion

D-Link DIR-100 long url filter evasion scip AG Vulnerability ID 3808 09/08/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 I. INTRODUCTION D-Link DIR-100 is a small and cost-effective router and firewall device for small offices and home users. More details are available at the official...

D-Link DIR-100 1.12 - Security Bypass

D-Link DIR-100 1.12 - Security Bypass source: https://www.securityfocus.com/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator. D-Link DIR-100 devices with firmware 1.12 are...

D-Link DIR-100 1.12 - Security Bypass

source: https://www.securityfocus.com/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator. D-Link DIR-100 devices with firmware 1.12 are vulnerable; other versions may be affected ...

PoCfix (PoC for Postfix local root vuln - CVE-2008-2936)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, The recent vulnerability in Postfix discovered by Sebastian Krahmer is trivially exploitable when certain preconditions are met. Nevertheless, it's very difficult to find such conditions in a real-world scenario. I wrote this exploit for fun an...

Be careful with my“DIR”overflow you! - Vulnerability warning-the black bar safety net

Author: axis Okay, I admit yesterday I was in the laneDIR overflowit. Notsharpxxxxxthat. dir overflow in fact there are several, some and cmd-related, and some require a specific environment. Today I the whole this is avulnerability. Microsoft has no patch because in Microsoft's view, this should...

PHP-Nuke 8.0 Final - 'sid' SQL Injection

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

CVE-2007-6641

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

CVE-2007-6464

Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the grootdir parameter to 1 adminpageopen.php and 2 clientpageopen.php in global/templates/...

CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

pam security, bug fix, and enhancement update

0.99.6.2-3.26 - removed realtime default limits 240123 from the package as it caused regression on machines with nonexistent realtime group 0.99.6.2-3.25 - added and improved translations 219124 - adjusted the default limits for realtime users 240123 0.99.6.2-3.23 - pamunix: truncated MD5 passwor...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

PT-2007-6586 · Phpcms · Phpscms

Name of the Vulnerable Software and Affected Versions: phpSCMS versions 0.0.1-Alpha1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the includes/functions.php file. This is a remote file inclusion issue. Note that the identified code...