The OWASP HTTP Post Tool ! Download Now

The OWASP HTTP Post Tool allows you to test your web applications to ensure its stability from HTTP GET and HTTP POST attacks. This tool was programmed by the author to over come the short comings of other HTTP attack tools such as Slowloris and PyLoris. In other words this QA tool was created to...

KING CMS V5 IIS parsing vulnerability-vulnerability warning-the black bar safety net

The default www.xx.com/admin/system/editor/FCKeditorboyisx/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=/o. asp&NewFolderName=o. asp Jus create a folder with the burst path...

Amlibweb NetOpacs - 'webquery.dll' Remote Stack Buffer Overflow (Metasploit)

$Id: amlibwebwebquerydllapp.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Vulnerability in Microsoft IIS Allows Malicious File Uploads

A vulnerability has been identified in Microsoft Internet Information Services IIS that causes the server to incorrectly handle files with multiple extensions separated by the “;” character. For instance, a file named “malicious.asp;.jpg” is treated as an ASP file. This flaw allows attackers to...

Microsoft IIS FTP Server - NLST Response Overflow (MS09-053) (Metasploit)

$Id: ms09053ftpdnlst.rb 11003 2010-11-12 06:19:49Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Symantec IM Manager多个SQL注入漏洞

Bugtraq ID: 44299 Symantec IM Manager为企业IM网络提供认证支持，对企业即时信息通信进行无缝管理，并实行安全保障、日志和存档。 Symantec IM Manager存在多个输入验证问题，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 -IM Manager中的管理接口存在缺陷。安装的IIS扩展主页面需要验证，不过许多页面可以直接访问，IMAdminScheduleReport.asp...

CVE-2010-0112

CVE-2010-0112 — Symantec IM Manager before version 8.4.16 is affected by multiple SQL injection vulnerabilities in the Administrative Interface (IIS extension). The issues allow remote attackers to inject SQL via numerous parameters (e.g., rdReport, DetailReportGroup, SummaryReportGroup, LoggedIn...

Symantec IM Manager Administrative Interface SummaryReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface LoggedInUsers.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx and rdPage.aspx pages which is exposed through an IIS...

Symantec IM Manager Administrative Interface rdpageimlogic.aspx SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface DetailReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdPageImlogic.aspx page which is exposed through an IIS extension on the defau...

Fedora 13 : php-pear-CAS-1.1.3-1.fc13 (2010-15943)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Microsoft Windows SChannel客户端证书处理拒绝服务漏洞（MS10-085）

BUGTRAQ ID: 43780 CVE ID: CVE-2010-3229 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的SChannel实现在SSL/TLS握手期间处理协议请求之前没有检查逻辑情况，如果远程攻击者向承载着启用了SSL的网站的IIS服务器发送了特制的客户端证书请求，就会导致LSASS服务停止响应和系统重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Serve...

Microsoft Security Bulletin MS10-085 - Important Vulnerability in SChannel Could Allow Denial of Service (2207566)

Microsoft Security Bulletin MS10-085 - Important Vulnerability in SChannel Could Allow Denial of Service 2207566 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Secure Channel SChannel security...

PT-2010-4665 · Microsoft · Iis 7.X +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fix, including Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 Description: A denial of service issue exists due to improper processing of client certificates during SSL...

Microsoft SChannel TLSv1 Denial of Service (MS10-085; CVE-2010-3229)

The Secure Channel SChannel security package is a Security Support Provider SSP that implements the Secure Sockets Layer SSL and Transport Layer Security TLS Internet standard authentication protocols. SChannel is part of the security package that helps provide an authentication service to provid...

Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability

The host is running Microsoft IIS Webserver and is prone to stack based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmsiisbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 201...

Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability (MS10-065) - Active Check

Microsoft IIS Webserver is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS FTP Server NLST Response Overflow

$Id: ms09053ftpdnlst.rb 10558 2010-10-05 23:39:14Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS09-053 Microsoft IIS FTP Server NLST Response Overflow

This module exploits a stack buffer overflow flaw in the Microsoft IIS FTP service. The flaw is triggered when a special NLST argument is passed while the session has changed into a long directory path. For this exploit to work, the FTP server must be configured to allow write access to the file...