Cherokee web server 0.5.4 DoS

No description provided by source. Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any...

Cherokee Web server 0.5.4 - Denial of Service

Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any misuse of this code Download Page :...

Cherokee 0.5.4 Denial Of Service

Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any misuse of this code Download Page :...

Cherokee Web server 0.5.4 - Denial of Service

Cherokee Web server 0.5.4 - Denial of Service Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsib...

Cherokee web server 0.5.4 DoS

Exploit for unknown platform in category web applications ============================= Cherokee web server 0.5.4 DoS ============================= Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Tested on Windows ! Disclaimer: This code is for Educational Purposes , I woul...

Code injection

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3711

Stack-based buffer overflow in the hhandlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

Stack overflow

Stack-based buffer overflow in the hhandlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

PT-2009-5970 · Httpdx · Httpdx

Name of the Vulnerable Software and Affected Versions: httpdx versions 1.4 through 1.4.3 Description: The issue is a stack-based buffer overflow in the h handlepeer function, located in http.cpp. This can be triggered by remote attackers sending a long HTTP GET request, potentially causing a deni...

httpdx 1.4 Get Request Buffer Overflow

No description provided by source. httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Othe...

Cross site scripting

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3457

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Cross site request forgery (csrf)

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Open redirect

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6882

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...

DM FileManager <= 3.9.4 RFI Vulnerability - Active Check

DM FileManager is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...