3476 matches found
PT-2005-4271 · Hasbani · Hasbani Web Server
Name of the Vulnerable Software and Affected Versions: Hasbani Web Server WindWeb version 2.0 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via crafted HTTP GET requests. Recommendations: For version 2.0, update to a newer version that...
security flaw
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
DEBIAN-CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
ngIRCd 0.8.1 - Remote Denial of Service (2)
ngIRCd 0.8.1 - Remote Denial of Service 2 / Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be...
GLSA-200411-36 : phpMyAdmin: Multiple XSS vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200411-36 phpMyAdmin: Multiple XSS vulnerabilities Cedric Cochin has discovered multiple cross-site scripting vulnerabilities in phpMyAdmin. These vulnerabilities can be exploited through the PmaAbsoluteUri parameter, the zerorows...
Solaris in.fingerd Crafted Request Information Disclosure
Binary data 1280.prm...
Remote Code Execution in Knowledge Builder.
Remote Code Execution in Knowledge Builder. "Knowledge Builder" from www.activecampaign.com allows to execute code. Example: Create the following file on your webserver: ----index.php---- ? system$cmd; ? ----------------- And then type in the following URL:...
ChatZilla 0.8.23 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/8627/info It has been reported that ChatZilla is prone to a denial of service vulnerability. The problem arises as a remote attacker posing as an IRC server sends specially crafted requests to the client containg large strings. If successful, an attack...
Web Server Crafted Request Vendor/Version Information Disclosure
The web server running on the remote host appears to be hiding its version or name, which is a good thing. However, using a specially crafted request, Nessus was able to discover the information. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11239; scriptversion...
Citrix Published Applications - Information Disclosure
Citrix Published Applications - Information Disclosure source: https://www.securityfocus.com/bid/5908/info A vulnerability has been discovered in Citrix. It is possible for an attacker to obtain information regarding Published Applications, by sending specially crafted requests to the Citrix...
Citrix Published Applications - Information Disclosure
source: https://www.securityfocus.com/bid/5908/info A vulnerability has been discovered in Citrix. It is possible for an attacker to obtain information regarding Published Applications, by sending specially crafted requests to the Citrix server, and examining responses. By bruteforcing a Citrix...
Apache Httpd < 2.0.42 : mod_dav crash
A flaw was found in handling of versioning hooks in moddav. An attacker could send a carefully crafted request in such a way to cause the child process handling the connection to crash. This issue will only result in a denial of service where a threaded process model is in use...
Sun i-Runbook 2.5.2 - Directory and File Content Disclosure
Sun i-Runbook 2.5.2 - Directory and File Content Disclosure source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the...
ArGoSoft 1.8 Mail Server - Directory Traversal
ArGoSoft 1.8 Mail Server - Directory Traversal source: https://www.securityfocus.com/bid/5144/info ArGoSoft Mail Server is an STMP, POP3 and Finger server for Microsoft Windows environments. ArGoSoft has a built in web server to enable remote access to mail. A directory traversal issue has been...
