CVE-2012-1783

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...

CVE-2012-1783

CVE-2012-1783 affects Tiny HTTP Server (Tiny Server) 1.1.9 and earlier. The vulnerability arises when processing a GET request that lacks an HTTP version number, where a long string can trigger a crash, enabling remote denial of service. The provided documents specify the affected software and th...

CVE-2012-1783

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...

Semantic Enterprise Wiki <= 1.6.0_2 XSS Vulnerability - Active Check

Semantic Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netmechanica NetDecision Traffic Grapher Server - Information Disclosure

Netmechanica NetDecision Traffic Grapher Server - Information Disclosure Title : Netmechanica NetDecision Traffic Grapher Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory :...

ManageEngine ADManager Plus Multiple XSS Vulnerabilities

ManageEngine ADManager Plus is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Torrent-Stats Denial Of Service

!/usr/bin/python import socket, urllib, sys host = 'localhost' port = 8080 s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, port s.settimeout8 print 'Sending GET request' size = sys.argv1 Crash at A 16378 size = 16379 DOS 1: gdb trace for buffer1 Program received signal SIGSEGV,...

Annuaire PHP XSS Vulnerability (Jan 2012) - Active Check

Annuaire PHP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiniCMS 1.0/2.0 - PHP Code Injection

Title : miniCMS v1.0 : v2.0 php inject code Author : Or4nG.M4n Version : all version GDork : "This site is managed using MiniCMS©" Download : http://sourceforge.net/projects/mini-cms/files/mini-cms/ Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0d3 | sp. Cyb3r-Crystal |...

w-CMS <= 2.0.1 Multiple Vulnerabilities - Active Check

w-CMS is prone to multiple HTML-injection vulnerabilities and a local file include LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2011-5058

The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...

Cross site request forgery (csrf)

The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...

CVE-2011-5058

The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...

AirTies-4450 - Unauthorized Remote Reboot (Denial of Service)

AirTies-4450 - Unauthorized Remote Reboot Denial of Service !/usr/bin/perl Title: AirTies-4450 Unauthorized Remote Reboot DoS. Type: hardware Tested on firmware: AirTiesAir4450RUFW1.1.2.18.bin Author: rigan - imrigan sobachka gmail.com The description of the device from a site of the vendor: With...

WebSVN Multiple XSS Vulnerabilities (Dec 2011)

WebSVN is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

V-CMS PHP File Upload and Execute

This module exploits a vulnerability found on V-CMS's inline image upload feature. The problem is due to the inlineimageupload.php file not checking the file type before saving it on the web server. This allows any malicious user to upload a script such as PHP without authentication, and then...

HP Network Node Manager i 9.10 Cross Site Scripting

================ Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple XSS vulnerabilities exist within HP NNMi. In the case of GET...

Herberlin Bremsserver <= 3.0 Directory Traversal Vulnerability - Active Check

Herberlin Bremsserver is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

V-CMS 1.0 Shell Upload

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Window...

CVE-2011-4078

include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...