CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script 'popuplargeimage.asp'. Successful exploitation of this issue may allow an...

w32.spybot.fcd worm infection

The remote system is infected with a variant of the worm w32.spybot.fcd. SPDX-FileCopyrightText: 2004 jorge rodriguez Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FTP Windows 98 MS/DOS device names DOS

It was possible to freeze or reboot Windows by reading a MS/DOS device through FTP, using a file name like CON\CON, AUX.htm or AUX. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Abyss httpd DoS

It was possible to kill the web server by sending a MS-DOS device names in an HTTP request. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. A cracker may use this attack to make this service crash continuously. OpenVAS Vulnerability Test $Id: jigsawmsdosdevDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jigsaw webserver MS/DOS device Do...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unchecked Buffer in XP Redirector (Q810577)

The remote host is vulnerable to a flaw in the RPC redirector which can allow a local attacker to run code of its choice with the SYSTEM privileges. OpenVAS Vulnerability Test $Id: smbntms03-005.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Unchecked Buffer in XP Redirector Q810577 Authors...

Inktomi Search Physical Path Disclosure

This web server is running a vulnerable version of Inktomi Search Certain requests using MS-DOS special file names such as nul can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be useful to an attacker. OpenVA...

HTTP Windows 98 MS/DOS device names DOS

It was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm or AUX. A cracker may use this flaw to make your system crash continuously, preventing you from working properly. OpenVAS Vulnerability Test $Id: httpw98devnamedos.nasl 814...

FTP Windows 98 MS/DOS device names DOS

It was possible to freeze or reboot Windows by reading a MS/DOS device through FTP, using a file name like CON\CON, AUX.htm or AUX. A cracker may use this flaw to make your system crash continuously, preventing you from working properly. OpenVAS Vulnerability Test $Id: ftpw98devnamedos.nasl 8145...

HTTP Windows 98 MS/DOS device names DOS

It was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm or AUX. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Infoseek / Verity Ultraseek < 5.2.2 Physical Path Disclosure (Jan 2004) - Active Check

Infoseek / Verity Ultraseek formerly Inktomi Search is prone to a physical path disclosure vulnerability. SPDX-FileCopyrightText: 2004 Westpoint Limited and Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3468

CVE-2005-3468 describes a directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40–6.42. The flaw lets limited remote attackers bypass Web Console authentication and read files, exposing partial confidentiality. The provided documents confi...

MS Internet Explorer 6.0 (mshtmled.dll) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= MS Internet Explorer 6.0 mshtmled.dll Denial of Service Exploit ================================================================= META...

MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows Plug-and-Play Umpnpmgr.dll DoS Exploit MS05-047 ============================================================== include include pragma commentlib, "mpr" pragma commentlib,...

MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure

source: https://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to obtain potentially sensitive data that could aid in other attacks. Tomcat 4.0.3...

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure source: https://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to...

The use of MS vulnerabilities and then talk about elevated permissions WEBSHELL-a vulnerability warning-the black bar safety net

PS:long time no write articles, and today idle all right it's not alright, I'm more depressed, quickly test CET4, but the in the mind have no bottom, and casually throw a garbage article out, hoping to be helpful to everyone. Today I want to bring to everyone is that when we get the WEBSHELL afte...

CVE-2005-2815

print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information path disclosure on error or cause a denial of service resource consumption via an MS-DOS device name in the news parameter to print.php, such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...