CVE-2017-16105

CVE-2017-16105 affects the simple HTTP server serverwzl . The vulnerability is a directory traversal issue that can be triggered by a URL containing sequences like "../" to access files outside the intended directory root, potentially exposing sensitive filesystem content. Multiple connected sour...

CVE-2017-16105

serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16089

CVE-2017-16089 affects the lightweight HTTP server serverlyr and describes a directory traversal vulnerability. The issue is triggered when an attacker uses URL paths containing sequences like “../” (or multiple variants) to access files outside the intended directory, potentially exposing sensit...

CVE-2017-16092

Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....

PT-2018-16140 · Unknown · Simplehttpserver

Name of the Vulnerable Software and Affected Versions: Simplehttpserver versions prior to 0.1.0 Description: The issue arises from a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. An attacker can exploit this by controlling the filename of a file used in the...

PT-2018-16137 · Node.Js · Angular-Http-Server

Name of the Vulnerable Software and Affected Versions: angular-http-server versions prior to 1.6.0 Description: The angular-http-server node module has a Path Traversal issue due to the lack of validation of the possibleFilename variable, allowing a malicious user to read the content of any file...

H2O HTTP Server < 2.2.5 Heap Overflow Vulnerability

H2O HTTP Server is prone to a heap buffer overflow while trying to emit access log. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Directory traversal

hftp is a static http or ftp server hftp is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Schneider Electric PLC HTTP Server Detected on Industrial Network

Binary data 700245.prm...

Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)

A security policy bypass vulnerability exists in Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP request with crafted URI to the remote HTTP server. Successful exploitation could result security policy bypass and arbitrary file upload...

Cisco SA520W Security Appliance - Path Traversal

Cisco SA520W Security Appliance - Path Traversal Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Securit...

Path Traversal

Overview Versions of angular-http-server before 1.4.4 are vulnerable to path traversal. Recommendation Update to version 1.4.4 or later. References - HackerOne Reporthttps://hackerone.com/reports/330349 - Commit 8bafc95 - GitHub Advisory...

Opera Browser Content Length Buffer Overflow (CVE-2010-1349)

A buffer overflow vulnerability exists in Opera Browser. The vulnerability is due to a boundary error in the way the browser processes HTTP server replies. Remote attackers could exploit this vulnerability by persuading a target user to connect to an attacker-controlled HTTP server with a...

Fedora 26 : httpd (2018-e6d9251471)

This update : - fixes the modmd default store directory - fixes a startup failure in certain modssl vhost configurations ---- This update includes the latest upstream release of the Apache HTTP Server, version 2.4.33. A number of security vulnerabilities are fixed in this release : - Low: Possibl...

[SECURITY] Fedora 26 Update: httpd-2.4.33-4.fc26

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Ubuntu: Security Advisory (USN-3627-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: php-7.2.5-1.fc28

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Moderate: Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update

An update for rh-php70-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Oracle HTTP Server Component Remote Vulnerability

Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments. HTTP Server is a web server component based on Apache open source technology that delivers static and dynamic content and integrates with both Oracle and non-Oracle products. HTTP...

GitList 0.6 Remote Code Execution

python import requests from BaseHTTPServer import BaseHTTPRequestHandler, HTTPServer import urlparse import urllib import threading import time import os import re url = 'http://192.168.1.1/gitlist/' command = 'id' yourip = '192.168.1.100' yourport = 8001 print "GitList 0.6 Unauthenticated RCE"...