CVE-2012-2531

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

TinyBrowser 1.32 Upload Shell Vulnerability

Exploit for php platform in category web applications Title: TinyBrowser 1.32 Upload Shell php.jpg Vulnerability Google Dork:inurl:js/tinymce/plugins/tinybrowser/ ------------------------- Affected products: ------------------------- Vulnerable are TinyBrowser v1.42 and previous versions and all...

MS12-073: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Information Disclosure (2733829)

The FTP service in the version of IIS 7.0 or 7.5 on the remote Windows host is affected by multiple vulnerabilities that could result in unauthorized information disclosure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62905; scriptversion"1.8"; scriptcvsdate"Date:...

CVE-2012-2532

CVE-2012-2532 affects Microsoft Internet Information Services (IIS) FTP service in IIS 7.0 and 7.5. The vulnerability arises from the FTP service processing unspecified commands before TLS negotiation, enabling remote attackers to disclose sensitive information from responses to those commands (F...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. OpenVAS Vulnerability Test $Id: secpodms12-073.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IIS FTP Service Information Disclosure Vulnerability 2761226 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-2531

CVE-2012-2531 concerns Microsoft IIS. Public description indicates IIS 7.5 stores credentials in the Operational log with weak permissions, enabling local users to read credentials (Password Disclosure Vulnerability). Connected sources reference an IIS FTP information-disclosure issue (MS12-073) ...

Microsoft Update Includes Critical Security Update for IE 9, First Patches for Windows 8, RT

Microsoft released its monthly security updates today and put special urgency on a cumulative security update for Internet Explorer 9. Critical vulnerabilities were found in the way the browser handles objects in memory which could lead to an attacker remotely executing code. Victims would have t...

Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability

Description Microsoft IIS is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary commands with the privileges of the application; this may disclose sensitive information...

MS12-073: Vulnerabilities in Microsoft Internet Information Services (IIS) could allow information disclosure: November 13, 2012

Resolves vulnerabilities in Internet Information Services IIS that could allow information disclosure if specially crafted FTP commands are sent to the server.IntroductionMicrosoft has released security bulletin MS12-073. To view the complete security bulletin, go to one of the following Microsof...

Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability

Description Microsoft IIS is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. Technologies Affected Avaya Conferencing Standard Edition 6.0.1 Microsoft IIS 7.5 Microsoft Windows 7 for...

MS12-066: Description of the security update for SharePoint Foundation 2010 Service Pack 1: October 9, 2012

Describes the security update for SharePoint Foundation 2010 Service Pack 1 that was released on October 9, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-066. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft IIS 5.0/6.0 FTP Server (Stack Exhaustion) Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Microsoft IIS 5.0/6.0 FTP Server Stack Exhaustion Denial of Service GUI VERSION Exploit Author: D35m0nd142 Date: 03/10/2012 Vendor Homepage: http://www.iis.net/ Tested on Ubuntu 12.04 CVE: 2009-2521 Special thanks ...

XYCMS injection vulnerability 0day and fix-vulnerability warning-the black bar safety net

/common. asp? id=1 6 Injection vulnerability, there is a lot of anti-injection system, how to breakthrough and I don't say that! Table segments by default adminuser field default is admin password The default background h/admin/ Take the shell method eweb5. 5 The use of vulnerability must be with...

To bypass the wisdom to create online waf to continue injection-vulnerability warning-the black bar safety net

Wisdom web site professional-grade firewall in some web environments, can be bypassed Detail Description: with various tools, resulting in the web exploit very easy, and web programmer many not all web vulnerabilities are very understanding, and training cost also is very high, therefore, some...

WebDAV aeration directory write permissions vulnerability-vulnerability warning-the black bar safety net

Recently, the 3 6 0 Web sitessecurity testingplatform issued an emergency Safety notice, widely used communication Protocol WebDAV there is a directory write permission to the high-risk vulnerabilities, an attacker can upload arbitrary text files, and combined with the server to resolve the...

IIS 6.0/7.0/7.5 and Nginx, Apache and other Web Service parsing vulnerability summary-vulnerability warning-the black bar safety net

Author:laterain From:90sec +IIS 6.0 Directory resolution:/xx.asp/xx.jpg xx. jpg can be replaced with any text filee.g. xx.txt, the text content for the back door code IIS6. 0 will be xx.jpg parsing of asp files. Suffix resolution:/xx. asp;. jpg /xx.asp:.jpghere the need to capture the modified fi...

CVE-2012-4591

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...

Code injection

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...