Baidu Department of Applied WormHole vulnerability details analysis-vulnerability warning-the black bar safety net

Baidu moplus SDK is called a wormhole（Wormhole of vulnerability was reported after the“a ripple”, it is implanted into 1 4 0 0 0 app, these apps have close to 4 0 0 0 A are by Baidu produced. The vulnerability is a vulnerability reporting platform black bar safety net vulnerability bulletins foun...

CVE-2007-1743

suexec in Apache HTTP Server httpd 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vend...

CVE-2007-1742

suexec in Apache HTTP Server httpd 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "htmlbackup" and "htmleditor" under an "html...

CVE-2007-1741

Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...

CVE-2007-0086

The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by...

CVE-2006-7098

The Debian GNU/Linux 033-FNOSETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl...

CVE-2004-2343

Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restri...

Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities : - CVE-2003-1418 - A denial of service vulnerability exists in libxml2, related to the xmlParserHandlePEReference function in file parser.c, due to loading external parameter entities without...

Oracle HTTP Server A vulnerability exists in the HTTP Server component.

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides features such as middleware, Oracle HTTP Server, a component based on Apache HTTP Server and used to create web servers. The platform provides...

CVE-2015-4914

Technical details about CVE-2015-4914 are not provided in the supplied documents; no specific affected products, versions, impact, or remediation are disclosed here. Monitor for updates.

CVE-2015-4914

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener...

Design/Logic Flaw

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener...

CVE-2015-1829

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener...

CVE-2015-1829

CVE-2015-1829 is a denial-of-service vulnerability in Apache Portable Runtime (APR) named-pipe support on Windows, exploitable to cause a pipe squatting DoS on affected IBM HTTP Server deployments (including WebSphere-related bundles). Root cause described: APR pipe handling flaw on Windows leadi...

CSRFT - Cross Site Request Forgeries (Exploitation) Toolkit

This project has been developed to exploit CSRF Web vulnerabilities and provide you a quick and easy exploitation toolkit. In few words, this is a simple HTTP Server in NodeJS that will communicate with the clients victims and send them payload that will be executed using JavaScript. This has bee...

[SECURITY] Fedora 22 Update: php-5.6.14-1.fc22

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Apache HTTP Server 2.4.x < 2.4.16 Multiple Vulnerabilities

Binary data 8970.prm...

openSUSE Security Update : apache2 (openSUSE-2015-635) (Logjam)

Apache2 was updated to fix security issues. - CVE-2015-3185: The apsomeauthrequired function in server/request.c in the Apache HTTP Server 2.4.x did not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote...

Mitsubishi Melsec FX3G-24M Denial Of Service

OS-S Security Advisory 2015-03 Date: September 29th, 2015 CVE: CVE-2015-3938 CVSS: 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Title: Mitsubishi ICS FX3G-24M Permanent Communication Denial of Service Severity: Critical. The TCP/IP communication of the Mitsubishi Melsec FX3G-24 is permanently disrupted. Ease of...

Gentoo Security Advisory GLSA 201408-12

Gentoo Linux Local Security Checks GLSA 201408-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...