CoreHTTP 0.5.3.1 - 'CGI' Arbitrary Command Execution

Package name: CoreHTTP server Version: 0.5.3.1 and below as long as cgi support is enabled Software URL: http://corehttp.sourceforge.net/ Exploit: http://aconole.brad-x.com/programs/corehttpcgienabled.rb Issue: CoreHTTP server fails to properly sanitize input before calling popen and allows an...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow

Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞

No description provided by source...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Red Hat Directory Server Accept-Language HTTP Header Parsing Buffer Overflow (CVE-2008-2928)

Red Hat Directory Server is an LDAP-based server that centralizes application settings, user profiles, group data, policies, and access control information into an operating system-independent, network-based registry. Fedora Directory Server is a free version of Red Hat Directory Server. There...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow

No description provided by source. !/usr/bin/python HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow Tested on XP SP3 + NNM Release B.07.50 Authors: muts & sinn3r Reference: http://dvlabs.tippingpoint.com/advisory/TPTI-09-12...

CGI Generic SQL Injection (blind, time based)

By sending specially crafted parameters to one or more CGI scripts hosted on the remote web server, Nessus was able to get a slower response, which suggests that it may have been able to modify the behavior of the application and directly access the underlying database. An attacker may be able to...

HP OpenView Network Node Manager多个远程代码执行漏洞

HP OpenView Network Node Manager是一款HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 HP OpenView Network Node Manager存在多个安全漏洞： CVE-2009-3845： CNCVE ID：CNCVE-20090898 CNCVE-20093845 CNCVE-20093846 CNCVE-20093849 CNCVE-20093848 CNCVE-20094176 CNCVE-20094177 CNCVE-20094178 CNCVE-20094179 CNCVE-20094180 CNCVE-200941...

HP NNM 7.53 ovalarm.exe Buffer Overflow

!/usr/bin/python HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow Tested on XP SP3 + NNM Release B.07.50 Authors: muts & sinn3r Reference: http://dvlabs.tippingpoint.com/advisory/TPTI-09-12 http://www.offensive-security.com/0day/exploit-nnm-ovalarm.py.txt import socket, sys i...

HP OpenView Network Node Manager Snmp.exe CGI Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request to Snmp.exe, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovalarm.exe' CGI Remote Buffer Overflow

!/usr/bin/python HP NNP ovalarm.exe CGI Remote Buffer Overflow - Pre Authentication Tested on XP SP3 + IIS + NNM Release B.07.50 Authors: muts & sinn3r x90.sinner a.t gmail.c0m Reference: http://dvlabs.tippingpoint.com/advisory/TPTI-09-12...

HP OpenView Network Node Manager (OV NNM) 7.53 - ovalarm.exe CGI Remote Buffer Overflow

HP OpenView Network Node Manager OV NNM 7.53 - ovalarm.exe CGI Remote Buffer Overflow !/usr/bin/python HP NNP ovalarm.exe CGI Remote Buffer Overflow - Pre Authentication Tested on XP SP3 + IIS + NNM Release B.07.50 Authors: muts & sinn3r x90.sinner a.t gmail.c0m Reference:...

HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ===================================================================== HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow ===================================================================== Title: HP NNM 7.53 ovalarm.exe...

HP OpenView NNM multiple security vulnerabilities

Multiple vulnerabilities in different CGI applications...

TPTI-09-13: HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability

TPTI-09-13: HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-13 December 9, 2009 -- CVE ID: CVE-2009-4180 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...