4583 matches found
CVE-2006-1951: Undefined Security Weakness
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1952: Undefined Security Weakness
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
Directory traversal
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...
Format string
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1026: Undefined Security Weakness
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...
CVE-2006-1026
CVE-2006-1026 affects JFacets before 0.2. The issue allows remote attackers to escalate privileges to any account by issuing a GET request with a modified account profileID. The description directly states privilege escalation via crafted request; no exploitation specifics are provided beyond tha...
CVE-2003-0249: Undefined Security Weakness
PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been disputed by the Apache...
CVE-2006-0784: Undefined Security Weakness
D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service CAMEO HTTP service crash via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments...
D-Link DWL-G700AP wireless access point DoS
Device crashes on HTTP "GET nn" request via web interface...
CVE-2006-0328
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a 1 GET or 2 SEND request...
CVE-2006-0328: Undefined Security Weakness
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a 1 GET or 2 SEND request...
Tftpd32 2.81 (GET Request) Format String Denial of Service PoC
Exploit for unknown platform in category dos / poc ============================================================== Tftpd32 2.81 GET Request Format String Denial of Service PoC ============================================================== !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical...
Valdersoft Shopping Cart 3.0 - Remote Command Execution
!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...
SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)
No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...
CVE-2004-2614
CVE-2004-2614 describes a buffer overflow in MyWeb 3.3 exploitable by a long HTTP GET request. Consequence: remote denial of service and potential arbitrary code execution. Affected software: MyWeb 3.3. Root cause: buffer overflow. Exploitation details, affected versions beyond 3.3, and remediati...
CVE-2004-2614
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...
CVE-2004-2614: Undefined Security Weakness
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...