Lucene search
K

6507 matches found

OpenVAS
OpenVAS
added 2009/08/24 12:0 a.m.30 views

Squid < 3.1.4 External Auth Header Parser DoS Vulnerabilities

Squid is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.3AI score0.60658EPSS
Exploits1References3
0day.today
0day.today
added 2009/08/24 12:0 a.m.15 views

humanCMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== humanCMS Auth Bypass SQL Injection Vulnerability ================================================== f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injecti...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2009/08/24 12:0 a.m.10 views

humanCMS (Auth Bypass) SQL Injection Vulnerability

No description provided by source. f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injection Vulnerability + Discovered by next + www.sa3eka.com www.m4r0c-s3curity.cc + vie.0athotmail.com + Home Page : http://www.squarelabel.com "humanCMS site description" + Auth...

7.1AI score
Exploits0
OSV
OSV
added 2009/08/18 9:0 p.m.2 views

DEBIAN-CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.8AI score0.60658EPSS
Exploits1References1
OSV
OSV
added 2009/08/18 9:0 p.m.4 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

6.2AI score
Exploits0References12
NVD
NVD
added 2009/08/18 9:0 p.m.15 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.2AI score0.60658EPSS
Exploits1References12
Prion
Prion
added 2009/08/18 9:0 p.m.21 views

Code injection

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.3AI score0.60658EPSS
Exploits1References12Affected Software1
Debian CVE
Debian CVE
added 2009/08/18 8:41 p.m.25 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS5.8AI score0.60658EPSS
Exploits1
Cvelist
Cvelist
added 2009/08/18 8:41 p.m.21 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

6.1AI score0.60658EPSS
Exploits1References12
exploitpack
exploitpack
added 2009/08/18 12:0 a.m.9 views

Infinity 2.x - options[style_dir] Local File Disclosure

Infinity 2.x - optionsstyledir Local File Disclosure ------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2009/08/18 12:0 a.m.17 views

Infinity &lt;= 2.x.x options[style_dir] Local File Disclosure Vulnerability

No description provided by source. ------------------Infinity = v2.X.X Local File Disclosure / Auth Bypass Vulnerabilities------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Infinity version : 2.X.X...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2009/08/18 12:0 a.m.30 views

Infinity 2.x - &#039;options[style_dir]&#039; Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

7.4AI score
Exploits0
UbuntuCve
UbuntuCve
added 2009/08/18 12:0 a.m.21 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS5.9AI score0.60658EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2009/08/18 12:0 a.m.15 views

Infinity 2.x.x Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2009/08/13 12:0 a.m.15 views

Shorty 0.7.1b (Auth Bypass) Insecure Cookie Handling Vulnerability

No description provided by source. Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google dork: intitle:"Shorty Beta"...

7.1AI score
Exploits0
0day.today
0day.today
added 2009/08/12 12:0 a.m.50 views

Shorty 0.7.1b (Auth Bypass) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== Shorty 0.7.1b Auth Bypass Insecure Cookie Handling Vulnerability ================================================================== Vulnerable Software...

7.1AI score
Exploits0
Prion
Prion
added 2009/08/10 4:30 p.m.7 views

Authentication flaw

profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin."...

7.5CVSS7.8AI score0.01661EPSS
Exploits1References4Affected Software1
Packet Storm
Packet Storm
added 2009/08/10 12:0 a.m.24 views

SmilieScript 1.0 SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :SmilieScript ======================================================= +++++++++++++++++++++++ Exploit...

0.8AI score
Exploits0
Packet Storm
Packet Storm
added 2009/08/10 12:0 a.m.16 views

Logoshows BBS 2.0 SQL Injection

Logoshows BBS 2.0 Auth Bypass SQL Injection Vulnerability -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX + Ga3 Réjàlà Xd : Download : http://www.logoshows.com/download/bbs88.rar...

0.3AI score
Exploits0
0day.today
0day.today
added 2009/08/10 12:0 a.m.27 views

SmilieScript <= 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SmilieScript = 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= =======================================================...

7.1AI score
Exploits0
Rows per page
Query Builder