CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

2007-06 Sentinel Protection Server Directory Traversal

Title ----- Sentinel Protection Server Directory Traversal Severity -------- High Date Discovered --------------- October 10th, 2007 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey Lebleu Vulnerability Description ------------------------- A classic...

CVE-2002-2416

The CVE-2002-2416 entry concerns the Zeroo web server (v1.5) with a directory traversal vulnerability allowing remote attackers to read arbitrary files by injecting “..” in a URL GET request. Public descriptions consistently state the flaw and affected product/version, but no concrete remediation...

CVE-2002-2406: Improper Input Validation

Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service hang via a large number of percent characters % in an HTTP GET request...

CVE-2002-2416: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. dot dot in a URL GET request...

CVE-2002-2353: Undefined Security Weakness

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests...

CVE-2003-1510

TinyWeb 1.9 allows remote attackers to cause a denial of service CPU consumption via a ".%00." in an HTTP GET request to the cgi-bin directory...

Citrix Access Gateway information leak

HTTP session cookie is passed through HTTP GET request parameters, making it possible to leak it value thorugh Referer: field or in the browsing history...

CVE-2002-2238

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2002-2237

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux...

CVE-2002-2240

Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...

CVE-2002-2237

CVE-2002-2237 affects TFTPD32 TFTP server 2.21 and earlier, allowing remote denial of service via a GET request containing a DOS device name (e.g., com1/aux). The CERT advisory associates this with Wyse TFTPD32 in Wyse Simple Imager (WSI) and lists a fixed version path: 2.51 for this CVE, with WS...

CVE-2002-2238: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2002-2240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...

CVE-2002-2237: Improper Input Validation

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux...

CVE-2004-2727

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow !/usr/bin/python Xitami Web Server 2.5 If-Modified-Since 0day Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Xitami 2.5c2 / XP SP2 Polish Shellcode: Windows Execute Command calc Details:.. Module...

CVE-2003-1337

Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2003-1339

Stack-based buffer overflow in eZnet.exe, as used in eZ a eZphotoshare, b eZmeeting, c eZnetwork, and d eZshare allows remote attackers to cause a denial of service crash or execute arbitrary code, as demonstrated via 1 a long GET request and 2 a long operation or autologin parameter to...

savant-overflow.txt

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...