146 matches found
Design/Logic Flaw
phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and ErrorHandler.class.php...
CVE-2013-5000
phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files...
CVE-2013-4998
phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmdcommon.php and other files...
CVE-2013-5000
CVE-2013-5000 affects phpMyAdmin 3.5.x before 3.5.8.2. The issue is information disclosure via an invalid request that reveals the installation path in an error message, related to config.default.php and other files. The vulnerability allows partial disclosure of sensitive paths when exploited. A...
Design/Logic Flaw
lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...
Arbitrary Code Execution Vulnerability in HiRDB Control Manager
Overview HiRDB Control Manager - Agent contains a vulnerability that could allow a remote attacker to execute arbitrary code when it receives an unexpected, invalid request. Impact A remote attacker could execute arbitrary code via an unexpected, invalid request. Solution Please refer to the...
InduSoft Web Studio Directory Traversal Vulnerability
This host is installed with Indusoft Web Studio and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodindusoftwebstudiodirtravvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ InduSoft Web Studio Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyrig...
InduSoft Web Studio Directory Traversal Vulnerability
Indusoft Web Studio is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TFTPUtil GUI 1.4.5 DoS (Meta)
Exploit for windows platform in category dos / poc ============================= TFTPUtil GUI 1.4.5 DoS Meta ============================= Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit...
TFTP GUI 1.4.5 Denial Of Service
Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...
TFTPUtil GUI 1.4.5 - Denial of Service (Metasploit)
TFTPUtil GUI 1.4.5 - Denial of Service Metasploit Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see th...
TFTPUtil GUI 1.4.5 - Denial of Service (Metasploit)
Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...
CVE-2010-0283
The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service assertion failure and daemon crash via an invalid 1 AS-REQ or 2 TGS-REQ request...
Netsupport Manager DoS
Crash on invalid request to application port...
CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
CVE-2008-1207: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service daemon crash via 1 an invalid request or 2 a large amount of data sent to the registered attribute value...
BrowseGate HTTP headers overflows
It was possible to kill the BrowseGate proxy by sending it an invalid request with too long HTTP headers Authorization and Referer A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id:...
HTTP Negative Content-Length DoS Vulnerability
The Savant web server was crashed by sending an invalid GET HTTP request with a negative Content-Length field. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...