Multiple MyWebServer bugs

DoS, administration interface protection bypass...

Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download

/ Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith, IsolationX, YpCat, Aria Giovanni, Ni...

wordpress -- XSS in administration panel

Pages in the administration panel of Wordpress are vulnerable for XSS attacks...

EmuliveVuln.txt

GulfTech Security Research September 20th, 2004 Vendor : Emulive Imaging Corporation URL : http://www.emulive.com Version : EmuLive Server4 Commerce Edition Build 7560 Risk : Multiple Vulnerabilities Description: Server4 is real-time media broadcasting software that works in conjunction with...

CVE-2004-1695

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...

CVE-2003-0053

CVE-2003-0053 describes an XSS vulnerability in parse_xml.cgi used by Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1. An attacker can supply a crafted filename parameter, which is reflected in an error message, allowing arbitrary script execution in the vi...

CVE-2003-0051

CVE-2003-0051 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi can reveal the server installation’s physical path via a NULL file parameter. The issue enables remote access to sensitive path information and is part of a set of re...

CVE-2003-0054

CVE-2003-0054 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1. The issue enables remote code execution when an unauthenticated request to port 7070 includes a script argument to the rtsp DESCRIBE method; the script is written to a log file and execu...

CVE-2002-0395

CVE-2002-0395 affects the Red-M 1050 Bluetooth Access Point: its TFTP server supply chain cannot be disabled, enabling an attacker to crack the administration password via UDP-based attacks. The vulnerability comes from the TFTP server being always active, which, combined with weak admin-password...

CVE-2003-0055

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...

CVE-2002-1147

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...

CVE-2002-0395

The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...

CVE-2003-0055

CVE-2003-0055 refers to a buffer overflow in the MP3 Broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1. The overflow can be triggered by a filename longer than 256 bytes, potentially allowing a remote attacker to execute arbitrary code ...

CVE-2002-1267

CVE-2002-1267 : The provided documents describe a vulnerability in Mac OS X 10.2.2 where remote attackers can cause a denial of service by accessing the CUPS Printing Web Administration utility (CUPS Printing Web Administration is Remotely Accessible). The description does not specify the underly...

CVE-2003-0050

The parse_xml.cgi component in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 is vulnerable to remote code execution. The root cause is a metacharacter injection flaw that allows remote attackers to execute arbitrary commands, potentially with root privile...

CVE-2003-0050: Undefined Security Weakness

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...

CVE-2002-1147: Undefined Security Weakness

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...

CVE-2004-0049: Undefined Security Weakness

Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...

CVE-2003-0051: Undefined Security Weakness

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter...

CVE-2003-0055: Undefined Security Weakness

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...