492 matches found
eoCMS 0.9 nightly Mullti Vulnerability
Exploit for php platform in category web applications ====================================== eoCMS 0.9 nightly Mullti Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
CVE-2010-3315
CVE-2010-3315 affects Apache Subversion’s mod_dav_svn: when SVNPathAuthz short_circuit is enabled, authz.c fails to correctly handle a named repository as a rule scope, allowing remote authenticated users to bypass access restrictions via svn commands. Vulnerable products/versions: Apache Subvers...
CVE-2010-3315
authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...
CVE-2010-3315
authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass...
SkyBlueCanvas [1.1 r248] SVN repository Vulnerability
Exploit for php platform in category web applications 0day.today 2018-01-10...
Tortoise SVN DLL Hijacking Vulnerability
The Common Vulnerabilities and Exposures CVE project has assigned the name CVE-2010-3199 to this issue. This is a candidate for inclusion in the CVE list http://cve.mitre.org, which standardizes names for security problems...
apr-util heap buffer underwrite
The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...
Fedora 12 : quake3-1.36-7.svn1783.fc12 (2010-8558)
Wed May 12 2010 Xavier Lamien - 1.36-7.svn1783 - Update release to svn revision r1783. - Remove botlib-strcpy-abuse patch added upstream. - Thu Jan 21 2010 Hans de Goede 1.36-6 - Update fix autodlrc mirror URL's 557252 - Fri Dec 18 2009 Hans de Goede 1.36-5 - Modify Urban Terror launch script to...
[CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL:...
Apache OFBiz Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL:...
Apache Tomcat v4.1.0 , v4.1.37, v5.5.0 to v5.5.26 vulnerabilities
Exploit for unknown platform in category web applications ================================================================= Apache Tomcat v4.1.0 , v4.1.37, v5.5.0 to v5.5.26 vulnerabilities ================================================================= Vulnerability description: An input...
Apache Tomcat Directory Traversal
Vulnerability description: An input validation error can be exploited to download arbitrary files via directory traversal attacks. Successful exploitation requires that a context is configured with allowLinking="true" and that the connector is configured with URIEncoding="UTF-8". Affected version...
Dopewars Server 'REQUESTJET' Message Remote Denial of Service Vulnerability
Dopewars is prone to a denial of service DoS vulnerability that affects the server part of the application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Dopewars 1.5.12 Server Denial of Service
No description provided by source. Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack \ of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the applicatio...
Dopewars 1.5.12 Server Denial of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111n^^Acfoon^AV65536n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Dopewars 1.5.12 Denial Of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Dopewars Server 1.5.12 - Denial of Service
Dopewars Server 1.5.12 - Denial of Service Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the...
Dopewars Server 1.5.12 - Denial of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows (deprecated)
Binary data 5140.prm...
mod_dav_svn, subversion security update
CentOS Errata and Security Advisory CESA-2009:1203 Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Subversion SVN is a...