10713 matches found
Watchguard SOHO 2.2 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to execut...
DiGi WWW Server 1 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume...
Microsoft Internet Explorer 6.0 URL Local Resource Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Interne...
Microsoft Internet Explorer 6.0/7.0 IFrame Refresh Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19364/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability when handling malicious HTML files. Successfully exploiting this issue allows attackers to consume excessive CPU resources in the affect...
WSMP3 0.0.x Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7642/info A vulnerability has been reported in WsMp3. The problem occurs due to insufficient sanitization of HTTP GET requests. As a result, an attacker may be capable of accessing the contents of sensitive system...
Red Hat 8/9 Directory Server Crafted Search Pattern Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30871/info Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns. An attacker can exploit this issue to consume CPU resources with one...
Network Tool 0.2 PHPNuke Addon Metacharacter Filtering Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3552/info Network Tool is a PHPNuke addon, written and maintained by Rick Fournier. It is designed to offer network features such as nmap, traceroute, and ping from a web interface. A problem with the package has been...
AutoIndex PHP Script 2.2.2/2.2.3 Index.PHP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26410/info AutoIndex PHP Script is prone to a remote denial-of-service vulnerability because the application fails to properly handle unexpected input. Successfully exploiting this issue allows remote attackers to consume...
Microsoft Internet Explorer 6 URI Handler Restriction Circumvention Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5730/info Microsoft Windows Internet Explorer 6.0 SP1 introduced restrictions for certain URI handlers such as file:// and res://. It has been demonstrated in the past that these URI handlers could be abused and...
SimpleBBS 1.0.6 Users.php Insecure File Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the SimpleBBS user databas...
TOPO 1.41 Remote Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6768/info It has been reported that TOPo may return information to users that is sensitive in nature. Under some circumstances, it is possible to produce an error message that reveals information about web directory...
Microsoft Internet Explorer 6.0 Codebase Double Backslash Local Zone File Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10344/info A vulnerability has been reported that may potentially permit HTML documents to gain unauthorized access to local resources by using specific syntax when referencing said resource as a value for the CODEBASE...
Apache Tomcat 3.x Null Byte Directory/File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6721/info Apache Tomcat is prone to a directory/file disclosure vulnerability when used with JDK 1.3.1 or earlier. It has been reported that remote attackers may view directory contents even when an 'index.html' or other...
Working Resources BadBlue 1.2.7 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program...
zeroo http server 1.5 - Directory Traversal vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to...
DUware Software Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9462/info It has been reported that various DUware products may be prone to an access validation issue allowing a remote attacker to gain access to sensitive resources by bypassing authentication. An arbitrary file upload...
PYSEC-2014-99
Multiple cross-site scripting XSS vulnerabilities in the responderror function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 resources.js or 2 resources.css in ajenti:static/, related to the traceback page...
PHP/fileinfo/file DoS
Resources exhaustion and infinite loop in CDF files parsing...
USN-2245-1: json-c vulnerabilities
Florian Weimer discovered that json-c incorrectly handled buffer lengths. An attacker could use this issue with a specially-crafted large JSON document to cause json-c to crash, resulting in a denial of service. CVE-2013-6370 Florian Weimer discovered that json-c incorrectly handled hash arrays. ...
Discuz blasting disregard CAPTCHA-vulnerability warning-the black bar safety net
? php classfuckdz publicfunctionsgk$user $a=filegetcontents"http://www.soyun.org/chaapi.php?so=$user&auto="; $a=iconv"UTF-8", "GB2312//IGNORE", $a; pregmatchall"/7%".& lt;/isU",$a,$arr; unset$arr0; foreach$arras$key=$r return$r; publicfunctiongetuid$host,$uid $ip= rand1 0 0, 2 4 4.'.'. rand1 0 0,...