Lucene search
K

43 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/07 11:58 p.m.3 views

Malicious code in bankrate-htr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4267f910d504855f87dd36f490616399e337d10f8e3a901db263c9abf44355da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/08/07 11:58 p.m.5 views

MAL-2024-7931 Malicious code in bankrate-htr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4267f910d504855f87dd36f490616399e337d10f8e3a901db263c9abf44355da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2015/03/26 12:0 a.m.1 views

Microsoft IIS HTR Request Buffer Overflow - Ver2 (CVE-2002-0071)

...

7.5CVSS6.4AI score0.69488EPSS
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Microsoft IIS 4.0 .HTR Path Overflow

No description provided by source. $Id: ms02018htr.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

Microsoft IIS 4.0 - Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacker to execut...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.26 views

Microsoft IIS 4.0 - Buffer Overflow Vulnerability (4)

No description provided by source. source: http://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacker to execut...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2010/04/30 12:0 a.m.34 views

Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)

$Id: ms02018htr.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

10CVSS7AI score0.84474EPSS
Exploits5
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.45 views

Microsoft IIS 4.0 .HTR Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

10CVSS0.2AI score0.84474EPSS
Exploits5
myhack58
myhack58
added 2007/01/20 12:0 a.m.20 views

Network Security Series knowledge of CGI exploits collection on-vulnerability warning-the black bar safety net

Following the collection and collation of some of the famous CGI vulnerability and provided some security recommendations and solutions, if the server of the presence of these vulnerabilities not patched, then, each vulnerability is likely will fill the intruder utilization, increase Server been...

8.9AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2007/01/01 12:0 a.m.4 views

Microsoft IIS HTR Request Buffer Overflow (CVE-2002-0071)

...

7.5CVSS6.4AI score0.69488EPSS
Exploits0
Saint
Saint
added 2006/02/17 12:0 a.m.38 views

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

7.5CVSS6.8AI score0.62409EPSS
Exploits4
Saint
Saint
added 2006/02/17 12:0 a.m.34 views

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

7.5CVSS6.9AI score0.62409EPSS
Exploits4
Saint
Saint
added 2006/02/17 12:0 a.m.42 views

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

7.5CVSS6.8AI score0.62409EPSS
Exploits4
Saint
Saint
added 2006/02/17 12:0 a.m.44 views

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

7.5CVSS6.8AI score0.62409EPSS
Exploits4
Metasploit
Metasploit
added 2006/01/21 10:10 p.m.32 views

MS02-018 Microsoft IIS 4.0 .HTR Path Overflow

This exploits a buffer overflow in the ISAPI ISM.DLL used to process HTR scripting in IIS 4.0. This module works against Windows NT 4 Service Packs 3, 4, and 5. The server will continue to process requests until the payload being executed has exited. If you've set EXITFUNC to 'seh', the server wi...

10CVSS7.2AI score0.84474EPSS
Exploits5
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.25 views

Microsoft IIS UNC Mapped Virtual Host Vulnerability

Your IIS webserver allows the retrieval of ASP/HTR source code. SPDX-FileCopyrightText: 2001 [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.7AI score0.83616EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.30 views

Microsoft Internet Information Services (IIS) Source Fragment Disclosure

Microsoft IIS 4.0 and 5.0 can be made to disclose fragments of source code which should otherwise be inaccessible. This is done by appending +.htr to a request for a known .asp or .asa, .ini, etc file. SPDX-FileCopyrightText: 2001 Pedro Antonio Nieto Feijoo Some text descriptions might be excerpt...

7.5CVSS6.7AI score0.84385EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.33 views

Microsoft IIS UNC Mapped Virtual Host Vulnerability

Your IIS webserver allows the retrieval of ASP/HTR source code. An attacker can use this vulnerability to see how your pages interact and find holes in them to exploit. OpenVAS Vulnerability Test $Id: iisuncmappedvirthostvuln.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Microsoft IIS UNC...

5CVSS0.1AI score0.83616EPSS
Exploits0
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.31 views

CVE-2002-0364

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."...

7.6AI score0.62409EPSS
Exploits4References10
CVE
CVE
added 2003/04/02 5:0 a.m.66 views

CVE-2002-0071

CVE-2002-0071: Buffer overflow in the ism.dll ISAPI extension (HTR) of Microsoft IIS 4.0/5.0 allows DoS or arbitrary code execution via crafted HTR requests with long variable names. The vulnerability affects IIS 4.0, 5.0 (and 5.1 per advisories) and is addressed by Microsoft Security Bulletin MS...

7.5CVSS7.3AI score0.69488EPSS
Exploits0References11Affected Software2
Rows per page
Query Builder