ViArt Shop Enterprise 4.1 Arbitrary Command Executio

?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line...

WebDAV aeration directory write permissions vulnerability-vulnerability warning-the black bar safety net

Recently, the 3 6 0 Web sitessecurity testingplatform issued an emergency Safety notice, widely used communication Protocol WebDAV there is a directory write permission to the high-risk vulnerabilities, an attacker can upload arbitrary text files, and combined with the server to resolve the...

DomsHttpd 1.0 - Remote Denial of Service

!/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk = "A"x3047; print $sock "POST /...

DomsHttpd 1.0 - Remote Denial of Service

DomsHttpd 1.0 - Remote Denial of Service !/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk =...

tls-nextprotoneg NSE Script

Enumerates a TLS server's supported protocols by using the next protocol negotiation extension. This works by adding the next protocol negotiation extension in the client hello packet and parsing the returned server hello's NPN extension data. For more information, see: Script Arguments...

[SECURITY] Fedora 16 Update: polipo-1.0.4.1-6.fc16

Polipo is a lightweight caching web proxy that was designed as a personal cache. It is able to cache incomplete objects and will complete them using range requests. It will use HTTP/1.1 pipelining if supported by the remote server...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...

PHP Hash Table Collision Proof Of Concept

Exploit for php platform in category dos / poc ''' This script was written by Christian Mehlmauer Original PHP Payloadgenerator taken from https://github.com/koto/blog-kotowicz-net-examples/tree/master/hashcollision CVE : CVE-2011-4885 requires Python 2.7 Examples: - Make a single Request, wait f...

Fedora Update for httpcomponents-client FEDORA-2011-7747

Check for the Version of httpcomponents-client OpenVAS Vulnerability Test Fedora Update for httpcomponents-client FEDORA-2011-7747 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 15 Update: httpcomponents-client-4.1.1-2.fc15

HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...

HTB22954: Path disclousure in yappa-ng Photo Gallery

Vulnerability ID: HTB22954 Reference: http://www.htbridge.ch/advisory/pathdisclousureinyappangphotogallery.html Product: yappa-ng Photo Gallery Vendor: http://www.zirkon.at/ http://www.zirkon.at/ Vulnerable Version: 2.3.2 Vendor Notification: 12 April 2011 Vulnerability Type: Path disclousure Ris...

Fedora Update for pywebdav FEDORA-2011-2460

Check for the Version of pywebdav OpenVAS Vulnerability Test Fedora Update for pywebdav FEDORA-2011-2460 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: pywebdav-0.9.4.1-1.fc15

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

[SECURITY] Fedora 13 Update: pywebdav-0.9.4.1-1.fc13

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

[SECURITY] Fedora 14 Update: pywebdav-0.9.4.1-1.fc14

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

Apache Shiro - Directory Traversal

Apache Shiro - Directory Traversal source: https://www.securityfocus.com/bid/44616/info Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that coul...

ruby -- UTF-7 encoding XSS vulnerability in WEBrick

The official ruby site reports: WEBrick have had a cross-site scripting vulnerability that allows an attacker to inject arbitrary script or HTML via a crafted URI. This does not affect user agents that strictly implement HTTP/1.1, however, some user agents do not...

XSS vulnerability in Campsite

Vulnerability ID: HTB22495 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite1.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Si...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

HTTP 1.1 - GET Directory Traversal

HTTP 1.1 - GET Directory Traversal source: https://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files an...