1752 matches found
tinyserver 1.1 - Directory Traversal
No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...
Mercantec SoftCart 4.00b - CGI Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
GoAhead WebServer 2.1.x Directory Management Policy Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9450/info GoAhead WebServer is prone to a vulnerability that may permit remote attackers to bypass directory management policy. It is reported that certain syntax may be used in HTTP GET requests to bypass the policy for...
Gordano Messaging Suite 9.0 WWW.exe Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8576/info It has been reported that Gordano Messaging Suite may be prone to a denial of service issue allowing a remote attacker to send malformed HTTP GET requests to cause the WWW.exe process to crash. The problme may...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
No description provided by source. +------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker |...
Hummingbird Collaboration Application Cookie Internal Network Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and...
Allaire JRun 3 Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes,...
Logics Software LOG-FT Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an...
InternetNow ProxyNow 2.6/2.75 Multiple Stack and Heap Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9500/info ProxyNow has been reported to be prone to multiple overflow vulnerabilities that may allow an attacker to execute arbitrary code in order to gain unauthorized access to a vulnerable system. The vulnerabilities...
ONO Hitron CDE-30364 Router - Denial of Service
No description provided by source. !/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router...
Apple Mac OS X Server 10.0 Overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GE...
Cerbere Proxy Server 1.2 Long Host Header Field Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server. A remote attacker may caus...
Max Feoktistov Small HTTP server 1.212 Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1355/info A buffer overflow is present in certain versions of the Small HTTP Server . The overflow in question is triggered by an overlong 65000 or more characters malformed HTTP GET request to the webserver...
Galacticomm Worldgroup 3.20 Remote Web Server Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4186/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been...
profitcode software payprocart 3.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13006/info ProfitCode Software PayProCart may allow a remote attacker to carry out directory traversal attacks. It is reported that this issue can be exploited by issuing a specially crafted HTTP GET request and supplying...
Invision Power Board 1.x Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13802/info Invision Power Board is affected by an unauthorized access vulnerability. Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing sufficient...
XtreamerPRO Media-player 2.6.0 & 2.7.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: XtreamerPRO Media-player and streamer multiple vulnerabilities Google Dork: intitle:Xtreamer Media Server + 2009 Xtreamer.net, All right reserved. Date: 15/05/2011 Author: Itzik Chen Software Link: www.xtreamer.net Version: ver 2.6.0, 2.7.0 Tested...
Eugene Ajenti 'respond_error' Multiple Cross-Site Scripting Vulnerabilities
Eugene Ajenti is prone to multiple cross-site scripting vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gitlist RCE Vulnerability
Gitlist is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
openSIS 5.3 Cross Site Request Forgery
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 openSIS 4.5 - 5.3 Cross Site Request Forgery Vulnerability ========================================================== Author: Ubani Anthony Balogun Reported: June 26, 2014 Product Description: - -------------------- openSIS, is a free student...