122 matches found
Microsoft FrontPage Extensions - Information Disclosure
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...
EUVD-2003-0693
Malware in sbrugna...
EUVD-2002-1674
Malware in sbrugna...
EUVD-2003-0218
Malware in sbrugna...
EUVD-2004-0205
Malware in sbrugna...
EUVD-2024-16694
Malicious code in bioql PyPI...
CVE-2002-1718
Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...
CVE-2024-0912: Insertion of Sensitive Information into Log File
Under certain circumstances the Microsoft® Internet Information Server IIS used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions...
PT-2024-15915 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: C•CURE 9000 Web Server affected versions not specified Microsoft Internet Information Server IIS affected versions not specified Description: Under certain circumstances, the Microsoft Internet Information Server IIS used to host the C•CURE...
April 18, 2017—KB4015554 (Preview of Monthly Rollup)
April 18, 2017—KB4015554 Preview of Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This non-security update includes improvements and fixes that were a part of Monthly Rollup KB4015551 released April 11, 2017 and also includes these new quality...
CVE-2017-0055: Improper Neutralization of Input During Web Page Generation
Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run...
PT-2017-1601
Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 Description T...
VBScript RegExpComp::PnodeParse Out-Of-Bounds Read
Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the sixth entry in that series. The below information is available in more detail on my blog at http://blog.skylined.nl/20161108001.html. There you can find a repro th...
VBScript CRegExp::Execute Uninitialized Memory Use
Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the fifth entry in that series. The below information is available in more detail on my blog at http://blog.skylined.nl/20161107001.html. There you can find a repro th...
Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2654/info Microsoft Internet Information Server is vulnerable to a denial of service. This particular denial of service affects versions 2.0, 3.0 and 4.0 of the server prior to service pack 4. The URL which causes this...
Microsoft IIS 5.0 IDC Extension Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5900/info A vulnerability in Microsoft Internet Information Server IIS may make cross-site scripting attacks possible. When IIS receives a request for an .idc file, the server typically returns a 404 message when the page...
RSA Authentication Agent for Web Buffer Overflow (CVE-2005-1471)
The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (1)
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass 1...
Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Vulnerability
Exploit for windows platform in category remote exploits =================================================================== Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Vulnerability ===================================================================...
