CVE-2005-1173

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...

sonicwallXSS.txt

SonicWALL SOHO/10 - XSS and Code Injection vulnerability ======================================================== Product: ======== SonicWall SOHO/10 is the 2nd generation Internet Security Appliance from Sonicwall, with firewall-, vpn-, contentfiltering- and other capabilities. Vulnerability:...

CVE-2005-1122

Format string vulnerability in cgi.c for Monkey daemon monkeyd before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers aka "double expansion error"...

Logics Software LOG-FT - Arbitrary File Disclosure

Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...

profitcode software payprocart 3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/13006/info ProfitCode Software PayProCart may allow a remote attacker to carry out directory traversal attacks. It is reported that this issue can be exploited by issuing a specially crafted HTTP GET request and supplying directory traversal sequences...

Logics Software LOG-FT - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...

LimeWire Gnutella peer-to-peer network agent directory traversal

Directory traversal and absolute path during GET request profcessing...

LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit

No description provided by source. !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; print "E.g: ...

Newsscript - Access Validation

Newsscript - Access Validation source: https://www.securityfocus.com/bid/12761/info NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages. It is reported that an attacker can exploit this issue by issui...

Newsscript - Access Validation

source: https://www.securityfocus.com/bid/12761/info NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages. It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET...

Computalynx CProxy 3.3/3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose arbitrary files and carry out a denial of service...

CVE-2005-0622

RaidenHTTPD 1.1.32 (and possibly earlier than 1.1.34) is affected by CVE-2005-0622. The issue allows remote attackers to view the PHP source code by issuing an HTTP GET for a filename that ends with a trailing dot or a trailing space. The vulnerability impacts confidentiality (partial) and is exp...

CVE-2005-0622

RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing 1 . dot or 2 space...

BadBlue < 2.60 'GET' Request Remote Overflow

Binary data 2657.prm...

CVE-2005-0575

Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request...

Knet web server buffer overflow

Buffer overflow on oversized GET request...

CVE-2004-1706

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

CVE-2004-1444

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...

CVE-2004-1444

CVE-2004-1444 describes a directory traversal vulnerability in Roundup 0.6.4 and earlier. An attacker can view arbitrary files by injecting ".." sequences in an @@ command within an HTTP GET request. The issue affects Roundup’s web-facing handling and exposes files the Roundup process can access....

CVE-2005-0275

The CVE-2005-0275 entry concerns 3Com 3CDaemon 2.0 revision 10, where TFTP handling allows remote denial of service via a GET request containing an MS-DOS device name. The issue is triggered by a crafted TFTP GET and results in an application crash, constituting partial availability impact. The s...