11830 matches found
Firefox 3.5 - escape Memory Corruption Exploit
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Yukihiro Matsumoto Ruby 1.x XMLRPC Server Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17645/info Ruby is affected by a denial-of-service vulnerability in the WEBrick HTTP server. This issue is due to the use of blocking network operations. Ruby's implementation of XML/RPC is also affected, since it uses th...
phusion webserver 1.0 - Directory Traversal vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using...
KarjaSoft Sami HTTP Server 1.0.4 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9679/info A vulnerability has been reported for Sami HTTP server. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable of corrupting sensitive data suc...
nginx [engine x] http server <= 0.6.36 - Path Draversal
No description provided by source...
Sambar Server 4.4/5.0 pagecount File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3091/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar WWW Server is bundled with a sample script'pagecount' which creates temporary files on the host. However, it is possib...
AOL Instant Messenger goaway Overflow
No description provided by source. $Id: aimgoaway.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability
No description provided by source. Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID:...
Oracle HTTP Server - XSS Header Injection
No description provided by source. --------------------------------------------------------------------------------------------------------- Oracle HTTP Server XSS Header Injection --------------------------------------------------------------------------------------------------------- Attack...
Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit
No description provided by source...
zeroo http server 1.5 - Directory Traversal vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to...
MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7944/info The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readabl...
WebFS 1.x Long Pathname Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...
Winamp Playlist UNC Path Computer Name Overflow
No description provided by source. $Id: winampplaylistunc.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
Acritum Femitter 1.03 - Directory Traversal Exploit
No description provided by source. Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version of the...
McAfee ePolicy Orchestrator / ProtectionPilot Overflow
No description provided by source. $Id: mcafeeepolicysource.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose the requested file...
Java Web Start Double Quote Injection Remote Code Execution
No description provided by source. ======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 a...
Sun Java Applet2ClassLoader - Remote Code Execution Exploit
No description provided by source. $Id: javacodebasetrust.rb 11983 2011-03-16 05:01:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
National Instruments LabVIEW 5.1.1/6.0/6.1 HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a malformed HTTP request is received, it is...