408 matches found
[SECURITY] Fedora 23 Update: php-guzzlehttp-guzzle-5.3.1-1.fc23
Guzzle is a PHP HTTP client that makes it easy to work with HTTP/1.1 and ta kes the pain out of consuming web services. Pluggable HTTP adapters that can send requests serially or in parallel Doesn't require cURL, but uses cURL by default Streams data for both uploads and downloads Provides event...
WYSIWYG Network Packet Editor: WireEdit
WYSIWYG Network Packet Editor WireEdit is first-of-a-kind and the only full stack cross-platform WYSIWYG network packets editor. It allows editing packets data at all stack layers as “rich text” in a simple point-and-click interface. The input and output format is Pcap. Is WireEdit a Pcap Editor?...
Apache Httpd < 2.2.32 : Apache HTTP Request Parsing Whitespace Defects
Apache HTTP Server, prior to release 2.4.25 and 2.2.32, accepted a broad pattern of unusual whitespace patterns from the user-agent, including bare CR, FF, VTAB in parsing the request line and request header lines, as well as HTAB in parsing the request line. Any bare CR present in request lines...
Ramui Forum Script 9.0 - SQL Injection
Ramui Forum Script 9.0 - SQL Injection Title: Ramui forum script 9.0 SQL Injection Exploit Author: bd0rk Twitter: twitter.com/bd0rk Vendor: http://www.ramui.com/ Download: http://ramui.com/forum-script/download-v9.html Google-Dork: n/a ---Script-Kiddie protection! : Direct SQL-Path: n/a...
httpcomponents security update
CentOS Errata and Security Advisory CESA-2014:1146 Updated httpcomponents-client packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS ba...
Important: Red Hat Security Advisory: httpcomponents-client security update
Updated httpcomponents-client packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
[SECURITY] Fedora 20 Update: httpcomponents-client-4.2.5-4.fc20
HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...
[SECURITY] Fedora 19 Update: httpcomponents-client-4.2.5-4.fc19
HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...
simple webserver 2.3-rc1 - Directory Traversal
No description provided by source. Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal Date: 01/02/2013 Exploit Author: CwG GeNiuS Vendor Homepage: http://www.pmx.it Software Link: http://www.pmx.it/download/sws-2.3-rc1-i686.exe Version: 2.3-rc1 and earlier Tested on: Windows 7 Enterprise...
MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit
No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...
MiniWebsvr <= 0.0.6 - Remote Resource Consumption DoS Exploit
No description provided by source. import socket print ----------------------------------------------------------------------- print MiniWebsvr 0.0.6 0-Day Resource Consumption print url: http://miniwebsvr.sourceforge.net/ print author: shinnai print mail: shinnaiatautisticidotorg print site:...
Joe Kloss RobinHood 1.1 - Buffer Overflow Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1944/info RobinHood is a HTTP/1.1 web server based upon libHTTP and is designed for the BeOS platform. Improper bounds checking exists in code that handles requests RHCWindow.cpp and RHLogger.cpp. The components RHConsol...
HTTP 1.1 GET Request Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and...
DomsHttpd <= 1.0 - Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl DomsHttpd 1.0 = Remote Denial Of Service Exploit Credit: Jean Pascal Pereira [email protected] Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || localhost; my $port = shift || 88; my $sock =...
C2FO: OPTIONS Method Enabled
Vulnerability Details:- I detected that OPTIONS method is allowed. This issue is reported as extra information. Impact:- Information disclosed from this page can be used to gain additional information about the target system. Remedy:- Disable OPTIONS method in all production systems. POC :- Reque...
[SECURITY] Fedora 19 Update: libmicrohttpd-0.9.33-1.fc19
GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...
[SECURITY] Fedora 20 Update: libmicrohttpd-0.9.33-1.fc20
GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...
D-Link - Multiple Vulnerabilities
Exploit Title: Multiple Vulnerabilities in Dlink devices Date: 05.04.2013 Exploit Author: m-1-k-3 Vendor Homepage: http://www.dlink.de Software Link:...
WordPress Plugin Count Per Day 3.2.5 - 'counter.php' Cross-Site Scripting
!/usr/bin/ruby Exploit Title: WordPress Count per Day 3.2.5 CSRF Google Dork: inurl:"/wp-content/plugins/count-per-day Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/count-per-day/ Software Link:...
D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution
This module exploits an OS Command Injection vulnerability in some D-Link Routers like the DIR-600 rev B and the DIR-300 rev B. The vulnerability exists in command.php, which is accessible without authentication. This module has been tested with the versions DIR-600 2.14b01 and below, DIR-300 rev...