5777 matches found
Orenosv HTTPFTP Server 0.5.9 - GET Denial of Service (2)
Orenosv HTTPFTP Server 0.5.9 - GET Denial of Service 2 source: https://www.securityfocus.com/bid/10420/info Orenosv HTTP/FTP server is prone to a denial of service vulnerability that may occur when an overly long HTTP GET request is sent to the server. When the malicious request is handled, it is...
EXP_OmniHTTPd.BAT
EXPOmniHTTPd.BAT @echo off :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :Application: OmniHTTPd :Vendors: http://www.omnicron.ca :Version: 0xE0 f 117 206 41 !JMPESP@w2k e 207 12 45 FA 7F !Shellcode e 20B EB 1B 5B BE 43 6F 6F 6C BF 49 43 45 21 43 39 3B e 21B 75 FB 4B 80 3...
Xlight ftp server 1.52 RETR bug
Application: Xlight ftp server http://www.xlightftpd.com/ Version: 1.52 Bug: Denial Of Service Author: intuit e-mail: [email protected] web: http://rootshells.tk/ 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description: "Xlight ft...
The_First_Cut_Is_The_Deepest.txt
!/usr/bin/php -q PHPnuke 6.x and 5.x fetch author hash by pokleyzz Web Links module 3rd January 2004 : 9:29 a.m Web Links module bug found by pokleyzz 3rd January 2004 Requirement: PHP 4.x with curl extension; Greet: tynon, sk ,wanvadder, sirflyguy, wxyz , tenukboncit, kerenggakurus , s0cket370 ,...
Resources consumption in Goahead webserver <= 2.1.8
Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
DEBIAN-CVE-2003-0855
Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...
[AP] YaBB Cross-Site Scripting vulnerability
-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 06/21/2002 homepage: http://sec.angrypacket.com advisory...
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
Tru64 UNIX 4.0g - usrbinat Local Privilege Escalation
Tru64 UNIX 4.0g - usrbinat Local Privilege Escalation / Tru64 UNIX 4.0g JAVA /usr/bin/at local root exploit. ALPHA Author: Cody Tubbs loophole of hhp. Site: www.hhp-programming.net Email: [email protected] Date: 2/1/2000. I made this without access to gdb, It's untested... may require...
Vulnerability in Free Java Web Server
Vulnerability in Free Java Web Server Overview Free Java Web Server v1.0 is a Java web server available from http://www.download.com. A vulnerability exists which allows a remote user to break out of the web root using relative paths ie: '..', '...'. Details http://localhost/../file outside web...
pkc004.txt
/ pkc004.txt / -= SECURITY ADVISORY 004 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | - Group: Packet Knights http://www.pkcrew.org/ - Date of release: 01/22/2000 - Problems: Format bugs - Impact: Remote vulnerablity allows to execute arbitrary code with th...
[pkc] format bugs in icecast 1.3.8b2 and prior
/ pkc004.txt / -= SECURITY ADVISORY 004 =- | www.pkcrew.org / | / | | | | | / | | | | | / | | | | / | | / / | | | / | | | | | PkC | | | / | | | | | | || || || / Packet Knights Crew -= SECURITY ADVISORY 004 =- - Vulnerable program: icecast 1.3.8beta2 and prior - Tested on: Linux/ix86 - icecast 1.3...
gnome_segv local buffer overflow
Exploit for linux platform in category local exploits ================================ gnomesegv local buffer overflow ================================ / gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / email protected 12/9/2000 This exploit was coded...
News Publisher CGI Vulnerability
Product: News Publisher Versions: Tested v1.05, 1.05a, 1.05b and 1.06 newest OS: Unix and Winnt Vendor: Notified Web Site: www.gwscripts.com The Problem, yet again CGI authors use nested IF statements to decide what action to take upon and incoming request. This time the problem allows ppl to add...
GWScripts News Publisher 1.0 - author.file Write
GWScripts News Publisher 1.0 - author.file Write source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request...
GWScripts News Publisher 1.0 - 'author.file' Write
source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request using any arbitrary username and password: POST...
