CVE-2017-2831

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2827

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

CVE-2016-2377

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the...

CVE-2014-5336

Monkey HTTP Server before 1.5.3, when the File Descriptor Table FDT is enabled and custom error messages are set, allows remote attackers to cause a denial of service file descriptor consumption via an HTTP request that triggers an error message...

TP-Link TL-WR740N Wireless Router - Denial of Service Exploit

No description provided by source. ?!/usr/local/bin/perl TP-Link TL-WR740N Wireless Router Remote Denial Of Service Exploit Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.16.4 Build 130205 Rel.63875n Released: 2/5/2013 -...

Multiple CSRF vulnerabilties in Question/Answer Threads

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47240. panel Multiple CSRF vulnerabilities exist on answers.atlassian.com where an attacker can potentially perform actions such...

MGASA-2014-0171 Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.6.1, a 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. The message buffer is not on the stack but will be overflowed resulting in corrupted memory and an...

CVE-2012-6112

The CVE-2012-6112 issue affects the PHP Spellchecker (Google Spellchecker) addon for TinyMCE, specifically the classes/GoogleSpell.php file in versions before 2.0.6.1. In Moodle deployments (2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, 2.4.x before 2.4.1) and other products, the c...

CVE-2011-1015

The iscgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / slash character at the beginning of the URI...

CVE-2009-3586

Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix...

openSUSE Security Update : apache2-mod_jk (apache2-mod_jk-1479)

Certain HTTP request could confuse the JK connector in Apache Tomcat which could result in a user seeing responses destined for other users CVE-2008-5519. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

nginx HTTP Request Remote Buffer Overflow

Binary data 5174.prm...

[VulnWatch] Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability Advisory ID: cisco-sa-20060405-css http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml Revision 1.0 For Public Release 2006 April 05 1500 GMT UTC -...

CVE-2006-0707

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / slash characters, which is accessed using the PATHINFO variable...

CVE-2005-3751

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers...

CVE-2003-1152

CVE-2003-1152 affects WebTide 7.04, where an HTTP request for %3f.jsp (encoded “?”) can cause remote attackers to list arbitrary directories. The vulnerability description confirms the issue exists in WebTide 7.04; no detailed root-cause or affected subcomponents are provided beyond this director...

CVE-2003-1083

Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request...

[ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4

Rstack Public Security Advisory RSTACK SA200502-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://rstack.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2004-0917

CVE-2004-0917 affects Vignette Application Portal. The default installation exposes an unauthenticated diagnostic utility accessible at /portal/diag (and related paths), enabling remote attackers to disclose sensitive information about the server, OS version, database parameters, and Vignette con...

Pingtel Xpressa 1.2.x/2.0/2.1 - Handset Remote Denial of Service

source: https://www.securityfocus.com/bid/11161/info Pingtel Xpressa handsets are reported prone to a remote denial of service vulnerability. The issue is reported to exist because of a lack of sufficient boundary checks performed on HTTP request data handled by the Xpressa administration web...