Sun Java Web Server 7.0 u7 - Admin Interface Denial of Service

Sun Java Web Server 7.0 u7 - Admin Interface Denial of Service Sun Java Web Sever 7.0 u7 Admin Interface DOS Software Package sjsws-70u7-windows-i586.zip 4fb8d1fb700d5649234a2891a4ecedea While attempting to verify http://www.exploit-db.com/exploits/14194/ which was not verified, I stumbled across...

Sun Java System Web Server Stack Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...

Sun Java Web Server 7.0 u7 - Remote Overflow

Sun Java Web Server 7.0 u7 - Remote Overflow / Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include includ...

Sun Java System Web Server WebDAV OPTIONS Buffer Overflow

$Id: sunjswsdavoptions.rb 9202 2010-05-02 21:04:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sun Java System Web Server Multiple Vulnerabilities

This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...

Miniature Java Web Server <= 1.71 Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits ========================================================== Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path...

Tiny Java Web Server 1.71 - Multiple Input Validation Vulnerabilities

Tiny Java Web Server 1.71 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/39666/info Tiny Java Web Server is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a...

Tiny Java Web Server 1.71 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/39666/info Tiny Java Web Server is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a directory-traversal vulnerability, an open-redirection vulnerability, and a...

miniature java Web server 1.71 - Multiple Vulnerabilities

Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: \r\n\r\n Lead to: HTTP RE...

Sun Java System Web Server WebDAV OPTIONS Buffer Overflow

This module exploits a buffer overflow in Sun Java Web Server prior to version 7 Update 8. By sending an "OPTIONS" request with an overly long path, attackers can execute arbitrary code. In order to reach the vulnerable code, the attacker must also specify the path to a directory with WebDAV...

CVE-2008-3425

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...

CVE-2007-6572

Cross-site scripting XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204...

Sun Java Web Proxy Server和Sun Java Web Server跨站脚本漏洞

BUGTRAQ ID: 26978 CNCAN ID:CNCAN-2007122401 Sun Java Web Proxy Server和Sun Java Web Server是两款基于JAVA的应用服务程序。 Sun Java Web Proxy Server和Sun Java Web Server存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或任意脚本代码执行。 目前没有详细漏洞细节提供。 Sun Java Web Proxy Server 4.0.5 Sun Java Web Proxy Server 4.0.4 Sun Java Web Proxy...

Sun Java Web Server unauthorized access

No description provided...

Jetty可预测随机会话ID漏洞

Jetty是一款流行的Java Web服务器。 Jetty的会话ID随机生成实现上存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 Jetty使用java.util.Random生成会话ID。java.util.random实现以下形式的线性同余随机数生成器： synchronized protected int nextint bits seed = seed 0x5DEECE66DL + 0xBL & 1L 48 - 1; return intseed 48 - bits;...

Jetty Non-random Session ID Vulnerability

Binary data 3904.prm...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...

Pegasi022.txt

Donato Ferrante Application: Pegasi Web Server PWS http://pws.sourceforge.net Version: 0.2.2 Bugs: Multiple Vulnerabilities Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

directory traversal in PWebServer 0.3.3

Donato Ferrante Application: PWebServer http://sourceforge.net/projects/pwebserver/ Version: 0.3.3 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descripti...

Blazix 1.2 - Special Character Handling Server Side Script Information Disclosure

source: https://www.securityfocus.com/bid/5566/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. When a user passes a request to the web server that ends in either a plus + or backslash , the web server ma...