3464 matches found
Webby Web server buffer overflow
Buffer overflow on GET request parsing...
vtiger CRM 5.2.0 Cross Site Request Forgery
!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...
IBM WebSphere应用服务器Web容器GET请求远程拒绝服务漏洞
CVE ID: CVE-2010-0776 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 WebSphere应用服务器的Web容器在调用response.sendRedirect期间没有正确地处理分块传输编码，远程攻击者可以通过提交恶意的GET请求导致拒绝服务。 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6....
Design/Logic Flaw
The Web Container in IBM WebSphere Application Server WAS 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request...
HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By making a specially crafted HTTP request to the "snmpviewer.exe" CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. The vulnerable code lies within ...
Xitami / 5.0a0 Denial Of Service
Exploit for windows platform in category dos / poc ================================ Xitami / 5.0a0 Denial Of Service ================================ Name : Xitami/5.0a0 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website:http://www.xc0re.net DATE: 10/05/10 Tested...
Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35
No description provided by source. !/usr/bin/php ?php / Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35newist as of release Vendor's Website:http://phpnuke.org/ Secuirty Researcher: Michael Brooks https://sitewat.ch Original Advisory:...
Joomla Component com_caddy - Vulnerability
Vulnerability in Joomla Component comcaddy. Webapps exploit for php platform Exploit Title: Vulnerability in Joomla Component comcaddy Date: 2010-04-22 Author: SuBz3r0 Software Link: Joomla Component: comcaddy Tested on: CVE : if exists Code : Just use for example the firefox addon tamper data...
CVE-2009-4769
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...
Format string
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...
CVE-2009-4769
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...
Huawei EchoLife HG520c Denial of Service and Modem Reset
Exploit for hardware platform in category dos / poc ======================================================== Huawei EchoLife HG520c Denial of Service and Modem Reset ======================================================== Exploit Title: Huawei EchoLife HG520c Denial of Service and Modem Reset...
CVE-2010-1316
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted 1 GET, 2 PUT, or 3 HEAD request, as demonstrated by a malformed GET request containing a long PATHINFO to...
CVE-2009-4660
Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...
CamShot v1.2 SEH Overwrite Exploit
Exploit for unknown platform in category remote exploits ================================== CamShot v1.2 SEH Overwrite Exploit ================================== CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET,...
JpGraph <= 3.0.6 Multiple XSS Vulnerabilities
JpGraph is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Apache Tomcat - Cookie Quote Handling Remote Information Disclosure
The following examples are available: +++ GET /myapp/MyCookies HTTP/1.1 Host: localhost Cookie: name="val " ue" Cookie: name1=moi +++ http://www.example.com/examples/servlets/servlet/CookieExample?cookiename=test&cookievalue=test%5c%5c%22%3B+Expires%3DThu%2C+1+Jan+2009+00%3A00%3A01+UTC%...
Proxy-Pro Professional GateKeeper 4.7 GET Request Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Proxy-Pro...
Cherokee web server 0.5.4 DoS
No description provided by source. Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any...
Cherokee Web server 0.5.4 - Denial of Service
Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any misuse of this code Download Page :...