Crlf injection

CRLF injection vulnerability in load.php in the Local Management Interface LMI on the IBM Proventia Network Mail Security System PNMSS appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the...

CVE-2010-0155

The CVE-2010-0155 issue affects IBM Proventia Network Mail Security System (PNMSS) with firmware older than 2.5, specifically the Local Management Interface (LMI). A CRLF injection vulnerability exists in load.php that is exploitable by remote authenticated users via the javaVersion parameter, en...

Proventia Network Mail Security System CRLF Injection

Security Advisory: MVSA-10-009 / CVE-2010-0155 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: CRLF Injection Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-009 Description Web-based...

A-Blog 2.0 SQL Injection

!/usr/bin/python Exploit Title: A-Blog v2.0 sources/search.php SQL Injection Exploit Date : 05 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/a-blog/ Version : 2.0 Tested on : EasyPHP 5.3.1.0 for...

Blogman 0.7.1 - 'profile.php' SQL Injection

!/usr/bin/python Exploit Title: Blogman v0.7.1 profile.php SQL Injection Exploit Date : 28 August 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/blogman/ Version : 0.7.1 Tested on : EasyPHP 5.3.1.0 for Windo...

Microsoft Internet Explorer - Object Type (MS03-020) (Metasploit)

$Id: ms03020ieobjecttype.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2561

Microsoft XML Core Services aka MSXML 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability."...

Novell 'modulemanager' Servlet Arbitrary File Upload (safe check)

The Administration Console component of Novell Access Manager or Novell iManager running on the remote web server has an arbitrary file upload vulnerability. Sending a specially crafted multipart POST request to '/nps/servlet/modulemanager' results in the upload of arbitrary data. Specifying a...

Crlf injection

CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or...

[SWRX-2010-001] Cisco ASA HTTP Response Splitting Vulnerability

SecureWorks Security Advisory SWRX-2010-001 Cisco ASA HTTP Response Splitting Vulnerability Advisory Information Title: Cisco ASA HTTP Response Splitting Vulnerability Advisory ID: SWRX-2010-001 Advisory URL: http://www.secureworks.com/ctu/advisories/SWRX-2010-001 Date published: Thursday, June 2...

WordPress Cimy Counter Plugin <= 0.9.5 - Vulnerabilities

This Cimy Counter plugin has many vulnerabilities such as full path disclosure, redirector, cross-site scripting and HTTP response spitting vulnerabilities. Solution Update the plugin...

Cisco ASA HTTP Response Splitting

SecureWorks Security Advisory SWRX-2010-001 Cisco ASA HTTP Response Splitting Vulnerability Advisory Information Title: Cisco ASA HTTP Response Splitting Vulnerability Advisory ID: SWRX-2010-001 Advisory URL: http://www.secureworks.com/ctu/advisories/SWRX-2010-001 Date published: Thursday, June 2...

WordPress Plugin Cimy Counter - Full Path Disclosure Redirector Cross-Site Scripting HTTP Response Spitting

WordPress Plugin Cimy Counter - Full Path Disclosure Redirector Cross-Site Scripting HTTP Response Spitting ---------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://sebug.net/exploit/19862/ ----------------------------- Affecte...

WordPress in Cimy Counter Multiple Vulnerability

Exploit for php platform in category web applications ================================================ WordPress in Cimy Counter Multiple Vulnerability ================================================ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions...

WordPress Plugin Cimy Counter - Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting

---------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://sebug.net/exploit/19862/ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions. ----------------------------- Timeline: 20.04.2010 -...

Cisco ASA Software HTTP Response Splitting Vulnerability

Cisco ASA Software versions prior to 8.12 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to improper handling of characters within URLs. An unauthenticated, remote attacker could exploit this...

Cisco Adaptive Security Response - HTTP Response Splitting

source: https://www.securityfocus.com/bid/41159/info Cisco Adaptive Security Response ASA is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that...

Vulnerabilities in Cimy Counter for WordPress

No description provided by source. I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/...

Cimy Counter For Wordpress Full Path Disclosure / Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ -----------------------------...

Vulnerabilities in Cimy Counter for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Redirector, Cross-Site Scripting и HTTP Response Spitting уязвимостях в плагине Cimy Counter для WordPress. Full path disclosure: http://site/wp-content/plugins/cimy-counter/cimycounter.php...