TGS CMS 0.3.2r2 Remote Code Execution Exploit

No description provided by source. TGS CMS Remote Code Execution Exploit by 0in from Dark-Coders Group! www.dark-coders.pl Contact: 0indotemailatgmaildotcom Greetings to:dieangel,suN8Hclf,m4r1usz,cOndemned,str0ke Dork:NULL - because "You cannot kill what you did not create" - Duality by Slipknot...

Novell eDirectory Host Environment Service (dhost.exe) HTTP Connection Header DoS

The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by a denial of service issue. By sending an HTTP request with a specially crafted 'Connection' header to the server, an unauthenticated attacker may be able to trigger ...

CVE-2007-5778

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

Information disclosure

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

CVE-2007-5778

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...

Design/Logic Flaw

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

CVE-2007-0578 affects mpg123 (http_open in httpget.c) where closing the HTTP connection early can cause an infinite loop, leading to DoS. Vulnerable version: mpg123 before 0.64. Public references in Mandriva (MDKSA-2007:032) indicate patches were released to fix the issue; other sources (SUSE, NV...

MS KB821724: ISA Server 2000 May Send Basic Credentials Over an External HTTP Connection

The remote ISA server is configured in such a way that it may send Basic authentication credentials over an insecure connection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18491; scriptversion"1.19"; scriptcvsdate"Date: 2018/11/15 20:50:28"; scriptbugtraqid13955;...

Manage authentication for NTLM proxies

We want to access RRS content internally, but we are using a secured proxy requiring authentication via NTLM or user/password. We setted up the standard Java proxies properties: http.proxyHost, http.proxyPort and http.auth.ntlm.domain. But it seams that the http.auth.ntlm.domain properties does n...

iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 04.08.03: http://www.idefense.com/advisory/04.08.03.txt Denial of Service in Apache HTTP Server 2.x April 8, 2003 I. BACKGROUND The Apache Software Foundation's HTTP Server Project is an effort to develop and maintain an...

KPMG-2002017: Snapgear Lite+ Firewall Denial of Service

-------------------------------------------------------------------- Title: Snapgear Lite+ Firewall Denial of Service BUG-ID: 2002017 Released: 02nd May 2002 -------------------------------------------------------------------- Problem: ======== Several issues with the Snapgear Lite+ Firewall coul...

Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal

Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal source: https://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that...

Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal

source: https://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that will allow any file to be read through the log service port ov...

DUO-PSA-2020-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2020-003 Publication Date: 2020-06-30 Revision Date: 2020-06-30 Status: Confirmed, Fixed Document Revision: 2 Overview Duo has identified and fixed an issue in the Duo Connect client that allows end-users to choose insecure configurations. If...