1594 matches found
Breach Security ModSecurity for Apache DoS
Module hangs on incomplete HTTP POST multipart/form-data request...
ModSecurity 2.5.9 - Remote Denial of Service
ModSecurity 2.5.9 - Remote Denial of Service ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...
HP LaserJet printers crossite request forgery
Crossite request forgery with form data in conjunctions with insecure default access...
Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload
============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
CVE-2008-3644
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...
Design/Logic Flaw
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...
CVE-2008-3644
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...
CVE-2008-3644
Summary: CVE-2008-3644 affects Apple Safari prior to 3.2. The issue is that Safari does not reliably prevent caching of form data in fields with autocomplete disabled, allowing local users to read sensitive information from the browser page cache. The vulnerability is described in the NVD entry f...
7Shop 1.1 - Arbitrary File Upload
!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . ".php"; int.. yes i know PU! print Spoofing + + Discovered && Coded By: t0pP8uZz + + + + Contact IRC: irc.rizon.net sectalk + + Vendor not notified! Later versions maybe vuln! + + + +...
MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...
Stack overflow
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to...
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...
PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload
PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...
PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload
'.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. else 85. $addupdatemsg = $addupdatemsg . ''.$lang'lcalfile'.'...
ImperialBB 2.3.5 - Arbitrary File Upload
ImperialBB 2.3.5 - Arbitrary File Upload Title : ImperialBB :\r\n\n"; $code = trimfgetsSTDIN; $socket = @fsockopen$argv1, 80, $eno, $estr, 30...
UploadImage/UploadScript 1.0 - Remote Change Admin Password
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d...
dlink.txt
!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...
CVE-2007-5845
Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...
Fedora 7 : firefox-2.0.0.4-1.fc7 (2007-0001)
Updated firefox packages that fix several security bugs are now available for Fedora Core 7. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed...