Lucene search
+L

188 matches found

RedHat Linux
RedHat Linux
added 2007/05/21 12:13 p.m.11 views

tomcat accept-language xss flaw

Cross-site scripting XSS vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616"...

2.6CVSS5.9AI score0.19889EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2007/05/14 4:59 p.m.9 views

tomcat accept-language xss flaw

Cross-site scripting XSS vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616"...

2.6CVSS5.9AI score0.19889EPSS
SaveExploits1References4
exploitpack
exploitpack
added 2006/04/15 12:00 a.m.77 views

Novell Messenger Server 2.0 - Accept-Language Remote Overflow (Metasploit)

Novell Messenger Server 2.0 - Accept-Language Remote Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the...

0.7AI score0.72833EPSS
SaveExploits12
seebug.org
seebug.org
added 2006/04/15 12:00 a.m.36 views

Novell Messenger Server 2.0 (Accept-Language) Remote Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

7.1AI score0.72833EPSS
SaveExploits12
Exploit DB
Exploit DB
added 2006/04/15 12:00 a.m.46 views

Novell Messenger Server 2.0 - 'Accept-Language' Remote Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

10CVSS5.8AI score0.72833EPSS
SaveExploits12
Metasploit
Metasploit
added 2006/04/14 8:22 p.m.61 views

Novell Messenger Server 2.0 Accept-Language Overflow

This module exploits a stack buffer overflow in Novell GroupWise Messenger Server v2.0. This flaw is triggered by any HTTP request with an Accept-Language header greater than 16 bytes. To overwrite the return address on the stack, we must first pass a memcpy operation that uses pointers we supply...

10CVSS0.3AI score0.72833EPSS
SaveExploits12
Zero Day Initiative
Zero Day Initiative
added 2006/04/13 12:00 a.m.146 views

Novell GroupWise Messenger Accept-Language Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Novell GroupWise Messenger. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Novell Messaging Agent, a web server that listens by default on TCP port...

10CVSS3.4AI score0.72833EPSS
SaveExploits12References1
NVD
NVD
added 2005/05/17 4:00 a.m.24 views

CVE-2005-1634

Multiple cross-site scripting XSS vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4...

4.3CVSS5.7AI score0.01375EPSS
SaveExploits0References1
Rows per page
Query Builder