556 matches found
Design/Logic Flaw
Use-after-free vulnerability in Open Litespeed before 1.3.10...
CVE-2015-3890
Use-after-free vulnerability in Open Litespeed before 1.3.10...
CVE-2015-3890
Use-after-free vulnerability in Open Litespeed before 1.3.10...
CVE-2015-3890
CVE-2015-3890 applies to Open Litespeed before 1.3.10, described as a use-after-free vulnerability. Multiple connected sources characterize the issue as a memory misreference that could allow remote-triggered crashes or instability; one CNVD entry explicitly calls it a memory misreference vulnera...
CVE-2015-3890: Use After Free
Use-after-free vulnerability in Open Litespeed before 1.3.10...
LiteSpeed Web Server HTTP Header Injection Vulnerability
LiteSpeed Web Server is a software for the Mac operating system. LiteSpeed Web Server suffers from an HTTP header injection vulnerability that allows attackers to exploit the vulnerability for injection attacks...
PHP LiteSpeed SAPI Memory Corruption Vulnerability
PHP File Manager is a PHP-based application programming interface for optimizing communication between LiteSpeed Web Server and third-party web applications. A memory corruption vulnerability exists in PHP LiteSpeed SAPI, which can be exploited by remote attackers to submit a special request to...
PHP 'sapi/litespeed/lsapilib.c' Information Disclosure Vulnerability
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in PHP 'sapi/litespeed/lsapilib.c' that allows remote attackers to exploit the vulnerability to submit a special request to obtain sensitive...
LiteSpeed Web Server 5.1.0 HTTP Header Injection
Information -------------------- Advisory by Netsparker Name: HTTP Header Injection in LiteSpeed Web Server Affected Software : LiteSpeed Web Server Affected Versions: v5.1.0 and possibly below Vendor Homepage : https://www.litespeedtech.com/ Vulnerability Type : HTTP Header Injection Severity :...
LiteSpeed Web Server 'httpreq.cpp' Denial of Service Vulnerability
LiteSpeed Web Server is a high-performance web server from LiteSpeed, Inc. The server can be used interchangeably with Apache and can handle thousands of concurrent connections with a small memory footprint. A denial of service vulnerability exists in LiteSpeed Web Server 1.3.9 and earlier...
PT-2015-15
Name of the Vulnerable Software and Affected Versions LiteSpeed affected versions not specified Description The issue is related to a lack of protection for internal data in the LiteSpeed web application server, allowing an attacker to obtain the contents of random memory segments, such as parts ...
Joomla Eventbooking Cross Site Scripting
Exploit Title : Joomla comeventbooking component XSS vulnerability Author : Jagriti Sahu AKA incredible Download Link : https://github.com/Jasonudoo/platform/tree/master/components/comeventbooking Date : 13/11/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mrudula and Harry Discovered At :...
FreeBSD LiteSpeed Web Server 4.0.17 with PHP - Remote Exploit
No description provided by source. LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer...
SePortal 2.5 - SQL Injection
No description provided by source. Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability:...
Litespeed Web Server 4.0.12 - (Add Admin) CSRF and XSS Vulnerabilities
No description provided by source. Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web...
Litespeed Technologies Web Server Remote Poison null byte Exploit
No description provided by source. Litespeed Technologies Web Server Remote Poison null byte Zero-Day discovered and exploited by Kingcope in June 2010 google gives me over 9million hits Example exploit session: %nc 192.168.2.19 80 HEAD / HTTP/1.0 HTTP/1.0 200 OK Date: Sun, 13 Jun 2010 00:10:38 G...
LiteSpeed 2.1.5 ConfMgr.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
LiteSpeed Web Server <= 3.2.3 - Remote Source Code Disclosure Vuln
No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos...
CVE-2012-4871
Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...