4144 matches found
AMSN instant messenger data spoofing
Port with predictable number is open for file retrieval without check for peer IP address...
linux/x86 Connect Back shellcode 90 bytes
Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 Connect Back shellcode 90 bytes ========================================= /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell...
CVE-2002-2184
Digi-Net Technologies DigiChat 3.5 exposes user IP addresses via a Showip parameter in the chat applet. The underlying issue is an information disclosure that allows one chat user to obtain another user’s IP, constituting a partial confidentiality impact (IP leakage). The available sources confir...
CVE-2002-2181
The CVE-2002-2181 entry describes a vulnerability in SonicWall Content Filtering where local users can access prohibited web sites by sending requests to a site’s IP address rather than using the domain name. The connected SonicWall PSIRT entry (SNWLID-2002-0001) mirrors this by stating that IP a...
CVE-2002-2184
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...
The most classic hack introductory textbook-vulnerability warning-the black bar safety net
The first section, hack the type and behavior of the To my understanding, the“hackers”generally should be divided into“positive”and“evil”Categories, the decent hackers rely on their own knowledge to help system administrators to identify system vulnerabilities and be improved, while the evil...
NAI PGP Cert Server DoS
It was possible to make the remote PGP Cert Server crash by spoofing a TCP connection that seems to come from an unresolvable IP address. OpenVAS Vulnerability Test $Id: PGPCertDoS.nasl 6040 2017-04-27 09:02:38Z teissa $ NAI PGP Cert Server DoS Authors: John Lampe [email protected] Changes by ...
How could an attacker use the“IP address spoofing” break through the firewall system? (Figure)-vulnerability warning-the black bar safety net
General access control is mainly in the firewall settings, develop a security policy: e.g. internal LAN resources do not allow external Internet users to use; not fortified areaknown as the demilitarized zonecan be for internal or external local area network, wherein the resource allows the...
Private IP address leaked in HTTP headers
This web server leaks a private IP address through its HTTP headers. SPDX-FileCopyrightText: 2001 Alert4Web.com, 2003 Westpoint Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
F5 BIG-IP Cookie Remote Information Disclosure
The remote host appears to be an F5 BIG-IP load balancer. The load balancer encodes the IP address of the actual web server that it is acting on behalf of within a cookie. Additionally, information after 'BIGipServer' is configured by the user and may be the logical name of the device. These valu...
CVE-2005-3176
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...
CVE-2005-3176
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...
CVE-2005-3176
CVE-2005-3176: Affects Microsoft Windows 2000 (before Update Rollup 1 for SP4). The issue is that the IP address of a Windows Terminal Services client is not recorded in a security log event when the client connects successfully, which could help an attacker evade detection. Connected documents c...
RHEL 4 : wget (RHSA-2005:771)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...
smf105.txt
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...
CVE-2002-2103
CVE-2002-2103 affects Apache before 1.3.24. When writing to the log file, Apache may record a spoofed hostname from reverse DNS for an IP address, even if a double-reverse lookup fails, allowing remote attackers to hide the original source of activities. The provided documents do not include expl...
CVE-2004-2249
Technical details about CVE-2004-2249 are not publicly provided in the supplied documents. Monitor for updates.