Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 DoS Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrator is asked to choose between managing fro...

HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow

No description provided by source. $Id: hpnnmsnmpvieweractapp.rb 12098 2011-03-23 15:47:20Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Barracuda Spam Firewall <= 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29340/info Barracuda Spam Firewall is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Miva htmlscript 2.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2001/info Miva's htmlscript CGI program provides a unique scripting language with HTML type tags. Note that htmlscript is an older product no longer distributed by Miva under that name. Versions of the htmlscript...

Adcycle 0.77/0.78 AdLibrary.pm Session Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2393/info Adcycle is a package of perl scripts available from Adcycle.com. The scripts are designed to manage banner ad rotation through a web interface, backended with a MySQL database. A problem with the suite could all...

Seowonintech Routers <= fw: 2.3.9 - Remote Root File Disclosure

No description provided by source. !/usr/bin/perl + Seowonintech routers = fw: 2.3.9 remote root file dumper Author: Todor Donev todor dot donev at gmail.com Type: Hardware Platform: Linux Special greetz to Stiliyan Angelov, Tsvetelina Emirska and all my friends that support me 2013 Bulgaria use...

MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (8)

No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...

Rit Research Labs TinyWeb 1.9.2 Unauthorized Script Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10445/info TinyWeb Server is affected by an unauthorized script disclosure vulnerability. This issue is due to an input validation error that allows malicious users to bypass standard web server rules. This issue will all...

Lib CGI 0.1 Include Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6264/info Lib CGI is a freely available, open source CGI library for C programmers. It is available for Unix and Linux operating systems. It has been reported that a buffer overflow exists in the Lib CGI development...

MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (6)

No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...

The Includer CGI <= 1.0 - Remote Command Execution (2)

No description provided by source. !/usr/bin/perl K-C0d3r Includer.cgi 1.0 remote command execution K-C0d3r C0d3d By K-C0d3r, a www.x0n3-h4ck.org friend! I think the bug was discovered by Francisco Alisson. Greetz to: mZ, CorryL, Expanders, SiNaPsE, off, rikky, milw0rm. FK of to all RxBot kiddies...

CGI-Club imTRBBS 1.0 - Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14091/info imTRBBS is affected by a remote command execution vulnerability. Specifically, an attacker can supply arbitrary commands prefixed with the '|' character through the 'imtrbbs.cgi' script that will be executed in...

HappyMall E-Commerce Software 4.3/4.4 Normal_HTML.CGI Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This could lead to attacks against system...

Hughes Technologies Mini SQL (mSQL) 2.0.11 w3-msql Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the...

Infinity CGI Exploit Scanner 3.11 Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7913/info Infinity CGI Exploit Scanner is prone to a remote command execution vulnerability. This is due to insufficient sanitization of input supplied via URI parameters. Exploitation could allow for execution of command...

BB4 Big Brother Network Monitor 1.5 d2 bb-hist.sh HISTFILE Parameter File Existence Disclosure

No description provided by source. source : http://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway...

HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflow

No description provided by source. $Id: hpnnmgetnnmdataicount.rb 12121 2011-03-24 00:49:33Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

E-Mail Security Virtual Appliance (ESVA) Remote Execution

No description provided by source. Exploit Title: E-Mail Security Virtual Appliance ESVA Remote Execution. Date: 10 Aug 2012 Exploit Author: iJoo Vendor Homepage: http://www.esvacommunity.com/ Software Link: http://sourceforge.net/projects/esva-project/ Version: 2.0.6 ESVA E-Mail Security Virtual...

IIS 1.0,Netscape Server 1.0/1.12,OReilly WebSite Professional 1.1 b BAT/.CMD Remote Command Execution

No description provided by source. IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: http://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are...

CoreHTTP 0.5.3.1 (CGI) - Arbitrary Command Execution Vulnerability

No description provided by source. Package name: CoreHTTP server Version: 0.5.3.1 and below as long as cgi support is enabled Software URL: http://corehttp.sourceforge.net/ Exploit: http://aconole.brad-x.com/programs/corehttpcgienabled.rb Issue: CoreHTTP server fails to properly sanitize input...