133 matches found
Unfixed Script Insertion vulnerability at yondaimenaruto.frblogs.net
Security researcher 599eme Man, has submitted on 01/07/2009 a Script Insertion vulnerability affecting yondaimenaruto.frblogs.net, which at the time of submission ranked 4161638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...
8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
8e6 Technologies R3000 Internet Filter Bypass with Host Decoy Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter contains a...
CVE-2008-2665
Directory traversal vulnerability in the posixaccess function in PHP 5.2.6 and earlier allows remote attackers to bypass safemode restrictions via a .. dot dot in an http URL, which results in the URL being canonicalized to a local filename after the safemode check has successfully run...
Directory traversal
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safemode restrictions by creating a subdirectory named http: and then placing ../ dot dot slash sequences in an http URL argument to the 1 chdir or 2 ftok function...
8e6-bypass.txt
8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...
Code injection
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...
CVE-2007-5437
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...
CVE-2007-5437
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...
Unfixed XSS vulnerability at www.hackbulten.com
Security researcher St@rExT, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.hackbulten.com, which at the time of submission ranked 1600392 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...
[Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Real Helix RTSP Server Heap Corruption Vulnerabilities MU-200606-01 June 22, 2006 http://labs.musecurity.com/advisories.html Affected Product / Versions: Real Networks Helix DNA Server 11.0.x Real Networks Helix DNA Server 10.0.x Product Overview: The...
Input-validation vulnerability in PHP-Nuke allows arbitrary command execution via request for remote web site
Overview PHP-Nuke has an input-validation vulnerability that can lead to execution of arbitrary PHP code hosted on another web server. Description PHP-Nuke is a tool designed to ease web site creation and maintenance. PHP-Nuke includes a script named index.php, which uses PHP's include function t...