138 matches found
Node.js HTTP parsing vulnerability-vulnerability warning-the black bar safety net
Indicates a temporary no nodejs in the field, and nodejs in the country I'm in Ali cloud seen once, it is sent to it. the poc in this: https://gist.github.com/2628868 The official announcement on this: http://blog.nodejs.org/2012/05/07/http-server-security-vulnerability-please-upgrade-to-0-6-17/...
IBM Tivoli Endpoint 4.1.1 Buffer Overflow / Hard-Coded Credentials
!/usr/bin/python tiv-sys.py IBM Tivoli Endpoint 4.1.1 Remote SYSTEM Exploit Jeremy Brown 0xjbrown41-gmail-com June 2011 Discovered by: Brian Adeloye of Tenable Network Security This exploit makes use of two vulnerabilities: 1 Base64 authentication credentials hard-coded in lcfd.exe 2 Stack-based...
Cisco Application Control Engine (ACE) - HTTP Parsing Security
Cisco Application Control Engine ACE - HTTP Parsing Security source: https://www.securityfocus.com/bid/40002/info Cisco Application Control Engine ACE is prone to a security weakness that may allow attackers to obfuscate HTTP server log entries. Attackers can exploit this issue to avoid having...
Cisco Application Control Engine (ACE) - HTTP Parsing Security
source: https://www.securityfocus.com/bid/40002/info Cisco Application Control Engine ACE is prone to a security weakness that may allow attackers to obfuscate HTTP server log entries. Attackers can exploit this issue to avoid having client IP addresses logged by servers. GET / HTTP / 1 . 1 HOST:...
Ipswitch WS_FTP 12 Professional Remote Format String PoC
Exploit for unknown platform in category dos / poc ======================================================== Ipswitch WSFTP 12 Professional Remote Format String PoC ======================================================== !/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional...
Ipswitch WS_FTP 12 Professional - Remote Format String (PoC)
Ipswitch WSFTP 12 Professional - Remote Format String PoC !/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII...
Ipswitch WS_FTP 12 Professional - Remote Format String (PoC)
!/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few months. And it has been over a yea...
Ipswitch WS_FTP 12 Professional Remote Format String 0day PoC
!/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few months. And it has been over a yea...
Ipswitch WS_FTP 12 Professional Format String
!/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few months. And it has been over a yea...
Streamripper multiple buffer overflows
Buffer overflows on HTTP response headers parsing, .m3u and .pls playlists parsing...
3proxy buffer overflow
Buffer overflow on parsing transparent HTTP proxy request...
Apple WebKit library ROWSPAN DoS
NULL pointer dereference on large rowspan number in HTTP parsing code...
CVE-2006-3124
Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers...
FreeBSD : squid -- possible cache-poisoning via malformed HTTP responses (b4d94fa0-6e38-11d9-9e1e-c296ac722cb3)
The squid patches page notes : This patch makes Squid considerably stricter while parsing the HTTP protocol. - A Content-length header should only appear once in a valid request or response. Multiple Content-length headers, in conjunction with specially crafted requests, may allow Squid's cache t...
Squid < 2.5.STABLE8 Multiple Vulnerabilities
According to its version number, the remote Squid caching proxy is affected by several security flaws : - There is a buffer overflow when handling the reply of a rogue gopher site. CVE-2005-0094 - There is a denial of service vulnerability in the WCCP code of the remote proxy. CVE-2005-0095 - The...
ISS Security Brief: Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief February 4, 2004 Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities Synopsis: ISS X-Force has discovered a flaw in the HTTP Application Intelligence component of Firewall-1. Application Intelligence is a...
HTTP Parsing Vulnerabilities in Check Point Firewall-1
Overview Several versions of Check Point Firewall-1 contain a vulnerability that allows remote attackers to execute arbitrary code with administrative privileges. Description The HTTP Security Servers component of Check Point Firewall-1 contains an HTTP parsing vulnerability that is triggered by...
Buffer overflow in Internet Explorer's HTTP parsing code
OVERVIEW ======== The code used in Microsoft Internet Explorer to parse web servers' HTTP replies contains a buffer overflow vulnerability. Specifically the faulty code is located in URLMON.DLL. A malicious user may exploit this vulnerability to execute arbitrary code on an IE user's system...