[SECURITY] Fedora 13 Update: pywebdav-0.9.4.1-1.fc13

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

[SECURITY] Fedora 14 Update: pywebdav-0.9.4.1-1.fc14

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

Apache Shiro - Directory Traversal

Apache Shiro - Directory Traversal source: https://www.securityfocus.com/bid/44616/info Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that coul...

ruby -- UTF-7 encoding XSS vulnerability in WEBrick

The official ruby site reports: WEBrick have had a cross-site scripting vulnerability that allows an attacker to inject arbitrary script or HTML via a crafted URI. This does not affect user agents that strictly implement HTTP/1.1, however, some user agents do not...

XSS vulnerability in Campsite

Vulnerability ID: HTB22495 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite1.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Si...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

HTTP 1.1 - GET Directory Traversal

HTTP 1.1 - GET Directory Traversal source: https://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files an...

Internet Explorer Long URL Buffer Overflow (CVE-2006-3869; CVE-2006-3873)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. A vulnerability has been reportedly introduced into certain versions of Microsoft Internet...

Opea 10.50 Integer Overflow

?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ....................../´¯/ ....................,/¯../ .................../..../ ............./´¯/'...'/´¯¯·¸ ........../'/.../..../......./¨¯\ ........'...´...´.... ¯/'...' ..........................'...../...

Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki [email protected] or [email protected] Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer...

Web Server Detection (HTTP/1.1)

The web server on this port responds to HTTP/1.1 requests and appears\n' 'to ignore HTTP/1.0 requests, which is unusual. C Tenable Network Security, Inc. include "compat.inc"; if description scriptid40405; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

X10media Mp3 Search Engine < 1.6.2 - Admin Access

THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...

[SECURITY] [DSA 1740-1] New yaws packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1740-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 14, 2009 http://www.debian.org/security/faq -...

pPIM 1.01 (notes.php id) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================= pPIM 1.01 notes.php id Remote Command Execution Exploit ========================================================= !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution...

WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

No description provided by source. =========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability =========================================================================== ,--^----------,--------,-----,-------^--...

Apple QuickTime RTSP连接状态显示远程溢出漏洞

BUGTRAQ ID: 27225 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime在填充包含有连接状态信息的LCD类屏幕时存在缓冲区溢出漏洞，远程恶意服务器可能利用此漏洞控制用户系统。 如果用户跟随了rtsp://连接且服务器的554端口关闭，Quicktime就会自动更改传输方式，在80端口上尝试HTTP协议，LCD类屏幕会显示服务器的404错误消息。 Apple QuickTime Player = 7.3.1.70 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2002-2395

InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding...

CVE-2002-2394

InterScan VirusWall 3.6 for Linux and 3.52 for Windows is affected by a vulnerability that allows remote attackers to bypass antivirus protection and potentially execute arbitrary code through HTTP/1.1 chunked transfer encoding. Affected components: VirusWall on Linux (3.6) and Windows (3.52). Ro...

CVE-2002-2394

InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding...

CVE-2002-2395

CVE-2002-2395 affects InterScan VirusWall 3.52 for Windows. The vulnerability allows remote attackers to bypass virus protection and potentially execute arbitrary code through HTTP/1.1 gzip content encoding. Multiple sources (Red Hat, CVE lists, NVD) reiterate the impact, with no details on explo...