phusion webserver 1.0 - Directory Traversal vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using...

National Instruments LabVIEW 5.1.1/6.0/6.1 HTTP Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a malformed HTTP request is received, it is...

Acritum Femitter 1.03 - Directory Traversal Exploit

No description provided by source. Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version of the...

Unixware 7.0 SCOhelp HTTP Server Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1717/info SCO Unixware 7 default installation includes scohelp, an http server that listens on port 457/tcp and allows access to manual pages and other documentation files. The search CGI script provided for that purpose...

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004antispam.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Netgear WGR614v9 - Wireless Router Get Request Denial of Service Vuln

No description provided by source. LUNOSEC ADVISORY Synopsis: Denial of Service condition in Netgear's WGR614v9 Wireless Router Firmware version tested: v1.2.214.0.13NA LATEST Firmware version tested: WNR834Bv2 v2.0.82.0.8 GTADarkDude tested Proof of Concept: Appending a question mark to the...

Sambar Server 4.4/5.0 pagecount File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3091/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar WWW Server is bundled with a sample script'pagecount' which creates temporary files on the host. However, it is possib...

FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability

No description provided by source. Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID:...

LionMax Software WWW File Share Pro 2.4/2.6 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable...

WebFS 1.x Long Pathname Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...

Symantec BackupExec Calendar Control Buffer Overflow

No description provided by source. $Id: symantecbackupexecpvcalendar.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

No description provided by source. $Id: msvidctlmpeg2.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Sun Java Web Start Plugin Command Line Argument Injection (2012)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Zervit HTTP Server <= 0.3 (sockets++ crash) Remote Denial of Service

No description provided by source. !/usr/bin/perl Zervit HTTP Server = v0.3 Remote Denial of Service. -------------------------------------------------------------------- The vulnerability is caused due to an error in multi-socket. This can be exploited to crash the HTTP service...

Apache HTTP Server Tomcat 5.x/6.0.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22960/info Apache HTTP servers running with the Tomcat servlet container are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows...

HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS

No description provided by source. Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS Date: date: 17/09/10 Author: d0lc3 @rmallof http://elotrolad0.blogspot.com/ Software Link: http://www.hp.com Version: 6.11 Tested on: Windows XP SP3 Spa Sumary: HP Dat...

Measuresoft ScadaPro <= 4.0.0 - Remote Command Execution

No description provided by source. $Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

miniwebsvr 0.0.10 - Directory Traversal/Listing Exploits

No description provided by source. miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of...

Bajie HTTP Server 0.95 Example Scripts And Servlets Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8841/info Demonstration scripts and servlets that are distributed as part of Bajie HTTP Server have been reported prone to multiple cross-site scripting vulnerabilities. It has been reported that a remote attacker may...

Outlook ATTACH_BY_REF_ONLY File Execution

No description provided by source. $Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...