152 matches found
CVE-2011-1424
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET...
Design/Logic Flaw
The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...
CVE-2011-2159
The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...
Douran 3.9.7.8 File Download/Source Code Disclosure Vulnerability
Exploit for asp platform in category web applications Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862...
wcanalyzer.com A free security service that audits your web.config settings !
wcanalyzer.com A free security service that audits your web.config settings ! 30+ Security Checks High quality and compherensive security checks. You 'll be suprised when you see our report. Click for our vulnerability database. Detailed Report Generates a detailed HTML report with vulnerability...
ASP.NET Padding Oracle Vulnerability (MS10-070)
No description provided by source. Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield deserve al...
ASP.NET Padding Oracle Vulnerability (MS10-070)
Exploit for windows platform in category remote exploits =============================================== ASP.NET Padding Oracle Vulnerability MS10-070 =============================================== Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html...
Microsoft ASP.NET - Padding Oracle (MS10-070)
Microsoft ASP.NET - Padding Oracle MS10-070 Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield...
Microsoft ASP.NET - Padding Oracle (MS10-070)
Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield deserve all the credits. Note from Exploit-db...
Acteaveidia Portals Read web.config Vulnerability
Exploit for php platform in category web applications ================================================= Acteaveidia Portals Read web.config Vulnerability ================================================= Exploit Title : Acteaveidia Portals Read web.config Vulnerability Author : ashiyane digital...
visinia 1.3 - Multiple Vulnerabilities
visinia 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...
Month Of Abysssec Undisclosed Bugs - Visinia 1.3 XSRF / LFI
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Wellcome to My Site!...
visinia 1.3 - Multiple Vulnerabilities
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery : www.abysssec.com Vendor :...
For Cuteeditor permeate the thinking-bug warning-the black bar safety net
By the author of the excavations, penetration cuteeditor site time if on the web. config get DB, or public permissions, for xpdirtree can not be used without worry when you can use this method successfully broke the path. To get the path of yet another party then it should be no filtering of...
Namad (IMenAfzar) 2.0.0.0 Remote File Disclosure Vulnerability
No description provided by source. Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download...
Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure
Namad IMenAfzar 2.0.0.0 - Remote File Disclosure Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File...
Namad (IMenAfzar) 2.0.0.0 Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ============================================================== Namad IMenAfzar 2.0.0.0 Remote File Disclosure Vulnerability ============================================================== Application Info: Name: Namad Version: 2.0.0.0...
Design/Logic Flaw
DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default 1 ValidationKey and 2 DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys...
CVE-2008-6540
DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default 1 ValidationKey and 2 DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys...
CVE-2008-6540
DotNetNuke prior to 4.8.2 stores default ValidationKey and DecryptionKey in web.config during installation or upgrade. This weak configuration allows remote attackers to bypass access restrictions by using the default keys. Impact: potential authentication/authorization bypass. Mitigation: upgrad...