Hardcoded credentials

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

CVE-2008-7161

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Serveez 0.1.7 Buffer Overflow

!/usr/bin/env python , ,, , SERVEEZ HTTP SERVER / |.'-.\ /.-'.| \ /.-' " -.\ GRETZ TO ALL HEAVY METAL MUSIC /.-' " -.\ import sys, socket try: host = sys.argv1 port = intsys.argv2 OFTEN 42422 path = sys.argv3 MUST EXIST except: print "LAMER" exit1 soc = socket.socketsocket.AFINET, socket.SOCKSTRE...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

No description provided by source. import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotor...

Zervit Web Server 0.3 - Remote Denial of Service

import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotorg " print " site:...

FortiGuard: URL Filtering Application Bypass Vulnerability

I dont know if its new but i code it during a PentTest and i would like to share it with you. It is based on code developed By sinhack research labs: http://sinhack.net/URLFilteringEvasion/sakeru.tx Description: "Fortinet's URL blocking functionality can be bypassed by specially-crafted HTTP...

[SECURITY] Fedora Core 6 Update: htdig-3.2.0b6-9.fc6

The ht://Dig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and AltaVista. Instead it is meant to cover the search needs for a...

[SECURITY] Fedora 8 Update: htdig-3.2.0b6-13.fc8

The ht://Dig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and AltaVista. Instead it is meant to cover the search needs for a...

ImgSvr 0.6 - 'Template' Local File Inclusion

source: https://www.securityfocus.com/bid/24853/info ImgSvr is prone to a local file-include vulnerability because it fails to sanitize user-supplied input. Attackers may exploit this issue to access files that may contain sensitive information. UPDATE December 24, 2007: According to the vendor,...

Utility for generating HTTP/1.x requests for shellcodes

No description provided by source. / genhttpreq.c, utility for generating HTTP/1.x requests for shellcodes SIZES: HTTP/1.0 header request size - 18 bytes+ HTTP/1.1 header request size - 26 bytes+ NOTE: The length of the selected HTTP header is stored at EDX register. Thus the generated MOV...

Utility for generating HTTP/1.x requests for shellcodes

Utility for generating HTTP/1.x requests for shellcodes. Shellcode exploit for generator platform / genhttpreq.c, utility for generating HTTP/1.x requests for shellcodes SIZES: HTTP/1.0 header request size - 18 bytes+ HTTP/1.1 header request size - 26 bytes+ NOTE: The length of the selected HTTP...

Utility for generating HTTP/1.x requests for shellcodes

Exploit for generator platform in category shellcode ======================================================= Utility for generating HTTP/1.x requests for shellcodes ======================================================= / genhttpreq.c, utility for generating HTTP/1.x requests for shellcodes SIZE...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

CVE-2006-2786 is an HTTP response smuggling vulnerability affecting Mozilla Firefox and Thunderbird prior to 1.5.0.4. According to connected advisories, an attacker could craft responses that a proxy or header formatting could fool the client into treating as responses from two different sites, p...

DefaultNav checker

This plugin checks for DefaultNav vulnerabilities on the remote web server For more information, see: http://www.nextgenss.com/advisories/defaultnav.txt OpenVAS Vulnerability Test $Id: defaultnavcheck.nasl 7165 2017-09-18 08:57:44Z cfischer $ Description: DefaultNav checker Authors: Hemil Shah...

Baby Web Server <= 2.6.2 Command Validation Exploit

Exploit for unknown platform in category remote exploits =================================================== Baby Web Server nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web Server perl babyws.pl localhost test.txt...

Web Server HTTP 1.0 Header Remote Overflow

It was possible to kill the web server by sending an invalid request with a too long HTTP 1.0 header From, If-Modified-Since, Referer or Content-Type. This vulnerability could be exploited to crash the web server. It might even be possible to execute arbitrary code on your system. As this is a...

CVE-2000-0649

CVE-2000-0649 describes an HTTP internal IP disclosure in IIS 4.0: an attacker can obtain the server’s private IP by requesting a page protected with Basic Authentication (no realm) via HTTP/1.0. Connected documents (Metasploit IIS_INTERNAL_IP module, Nessus/Nessus-like plugin, OpenVAS NASL) corr...