3148 matches found
Tolva.txt
Script: Tolva PHP website system Version: 0.1.0 Language: PHP Official Website: http://sourceforge.net/projects/twebs Problem: Remote File Include Discovered by: beford Description: ============ A complete collection of php scripts that work tightly together to create a highly customizable, dynam...
HP Security Digests - HP-UX security bulletins digest
HP Support Information Digests =============================================================================== o Security Bulletin Digest Split ------------------------------ The security bulletins digest has been split into multiple digests based on the operating system HP-UX, MPE/iX, and HP...
If the other is a BT-vulnerability warning-the black bar safety net
Use the security policy prohibits local host is connected to each other in any port! Then allow others to connect their 8 0 port! The debug/ftp/tftp/its/start/net/net1/echo/edit to remove it! Local only provides a web service! Shut down/filter all ports,and now get this host is a shell, there are...
[Full-disclosure] iDEFENSE Security Advisory 08.09.05: AWStats ShowInfoURL Remote Command Execution Vulnerability
AWStats ShowInfoURL Remote Command Execution Vulnerability iDEFENSE Security Advisory 08.09.05 www.idefense.com/application/poi/display?id=290&type=vulnerabilities August 09, 2005 I. BACKGROUND AWStats is a free tool that generates web, streaming, ftp or mail server statistics, graphically. It ca...
[Full-disclosure] ASP.NET RCP/Encoded Web service DOS
ASP.NET RCP/Encoded Web service DOS http://www.spidynamics.com/spilabs/advisories/aspRCP.html Release Date: July 11, 2005 Severity: High System Affected IIS Servers exposing ASP.NET Web services that consume arrays in RCP/Encoded mode Applications using System.Xml.Serialization to consume untrust...
security flaw
Eval injection vulnerability in PEAR XMLRPC 1.3.0 and earlier aka XML-RPC or xmlrpc and PHPXMLRPC aka XML-RPC For PHP or php-xmlrpc 1.1 and earlier, as used in products such as 1 WordPress, 2 Serendipity, 3 Drupal, 4 egroupware, 5 MailWatch, 6 TikiWiki, 7 phpWebSite, 8 Ampache, and others, allows...
CVE-2005-1207
Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...
Microsoft ISA Server HTTP/HTTPS Service Basic Auth Information Disclosure Vulnerability
Description Microsoft Internet Security and Acceleration ISA server is prone to an information disclosure vulnerability. Reports indicate that the issue manifests when an ISA server is publishing a Web service that has Basic authentication enabled, but the Web publishing rules that process the...
CVE-2004-1815
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...
CVE-2004-1815
CVE-2004-1815 affects ColdFusion MX 6.0/6.1 and JRun 4.0 where a SOAP web service expecting an array of objects as an argument can trigger a denial of service via memory exhaustion. The connected advisory (CPAI-2004-114) indicates the issue involves how Apache Axis handles SOAP arrays within requ...
Lotus Domino Server Web Service NRPC Authentication Format String DoS
Binary data 2870.prm...
Lotus Domino Server < 6.5.3 Web Service Remote DoS
Binary data 2800.prm...
IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service
IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network...
IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service
source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network requests. IBM has denied that this issue is a vulnerability and they ha...
Crystal Reports directory traversal
Web service directory traversal...
[NT] SurgeLDAP Web Service user.cgi File Retrieval
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2004-1816
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...
IMail Web Service User Aliases / Mailing Lists Admin Vulnerability
IMail Web Service User Aliases / Mailing Lists Admin Vulnerability Date : January 1, 2002 Author : Zeeshan Mustafa [email protected] Application : IPSwitch IMail Web Service Versions Test : 7.05/7.04/7.03/7.02/7.01/6.x Exploitable : Remote Vendor Status : Notified Impact of vulnerability :...
Переполнение буфера и обратный путь в модуле Oracle PL/SQL (buffer overflow, directory traversal)
Некорректное кодирование URL позволяет обратный путь, переполнение буфера при длинной строке запроса к системе помощи в Web-Сервисе...
SiteScope Web Service Unpassworded Access
The remote SiteScope web service has no password set. An attacker who can connect to this server can view usernames and passwords stored in the preferences section or reconfigure the service. %NASLMINLEVEL 70300 This script was written by H D Moore Changes by Tenable: - Revised plugin title...