4033 matches found
LocalWeb2000 2.10 Crafted Request File Disclosure
Binary data 1508.prm...
PHP-Nuke 0-7 - Delete God Admin Access Control Bypass
PHP-Nuke 0-7 - Delete God Admin Access Control Bypass source: https://www.securityfocus.com/bid/10861/info PHP-Nuke is reported prone to an access control bypass vulnerability. Reports indicate that a PHP-Nuke superuser may bypass access controls and privilege restrictions, to delete the PHP-Nuke...
PHP-Nuke 0-7 - Delete God Admin Access Control Bypass
source: https://www.securityfocus.com/bid/10861/info PHP-Nuke is reported prone to an access control bypass vulnerability. Reports indicate that a PHP-Nuke superuser may bypass access controls and privilege restrictions, to delete the PHP-Nuke "God Admin" account. This may be accomplished by maki...
IBM Lotus Domino Server Crafted .nsf Request Traversal Arbitrary File Access
Using a specially crafted request URL containing '.nsf/..', the installed version of Lotus Domino on the remote host can be abused to reveal the contents of arbitrary files on the server. Copyright C 2000 - 2009 Net-Square Solutions Pvt Ltd. By: Hemil Shah Desc: This script will check for the...
Vignette StoryServer 4.1 - Sensitive Stack Memory Information Disclosure
source: https://www.securityfocus.com/bid/7296/info It has been reported that Vignette StoryServer, under some circumstances may reveal stack memory content. If a specially crafted request is made for a page that accepts user-supplied data an error state may be triggered. If the attack is...
Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure
source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be appended with the Unicode equivalent of a space...
Roxen Web Server Counter Module Crafted Request Saturation DoS
Roxen Challenger WebServer is running with the counter module installed. Requesting large counter GIFs can lead to CPU exhaustion. If the server does not support threads, this will prevent the server from serving other clients. %NASLMINLEVEL 70300 Copyright 2000 by Hendrik Scholz Changes by...
CVE-2023-24596
This CVE ID is rejected as unused by its CNA and does not represent an active vulnerability entry.
CVE-2023-27508
CVE-2023-27508 has been rejected by its CNA as unused and does not represent an active vulnerability entry.
CVE-2022-51005
This CVE ID has been rejected and does not represent an active vulnerability entry.
CVE-2023-46702
This CVE ID is rejected by its CNA because it is unused and does not represent an active vulnerability entry.
Security Update For Exchange Server 2016 CU15 (KB4540123)
A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server...