apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

DEBIAN-CVE-2010-1452

The 1 modcache and 2 moddav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service process crash via a request that lacks a path...

PHPBB MOD 2.0.19 SQL Injection

% PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | Exploit--------------------------...

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability

Exploit for php platform in category web applications ============================================================== PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability ==============================================================...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| ||| || ||,|||\|||...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

phpBB MOD 2.0.19 - Invitation Only PassCode Bypass PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | |...

Fedora Update for mod_mono FEDORA-2010-10332

Check for the Version of modmono OpenVAS Vulnerability Test Fedora Update for modmono FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 13 Update: mod_mono-2.6.3-1.fc13

modmono allows Apache to serve ASP.NET pages by proxying the requests to a slightly modified version of the XSP server, called mod-mono-server, that is installed along with XSP...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (3)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB PunPortal <= 2.1 XSS Vulnerability

Exploit for php platform in category web applications ======================================== PunBB PunPortal Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm TheExploited member...

PunBB Private Message Mod <= 1.2.3 XSS Vulnerability

Exploit for php platform in category web applications ==================================================== PunBB Private Message Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

Hacker Evolution Game: untold Mod Editor 2.00.001 - Buffer Overflow (PoC)

Hacker Evolution Game: untold Mod Editor 2.00.001 - Buffer Overflow PoC !/usr/bin/perl Title : Hacker Evolution: untold Mod Editor buffer overflow Date : June 19, 2010 Author : gunslinger Web : http://devilzc0de.com Blog : http://gunslingerc0de.wordpress.com Software Link :...

Hacker Evolution Game: untold Mod Editor buffer overflow (PoC)

Exploit for windows platform in category dos / poc ============================================================== Hacker Evolution Game: untold Mod Editor buffer overflow PoC ==============================================================...

Hacker Evolution Game: untold Mod Editor 2.00.001 - Buffer Overflow (PoC)

!/usr/bin/perl Title : Hacker Evolution: untold Mod Editor buffer overflow Date : June 19, 2010 Author : gunslinger Web : http://devilzc0de.com Blog : http://gunslingerc0de.wordpress.com Software Link : http://www.exosyphen.com/pagehacker-evolution-untold.html Version : 2.00.001 Tested on : Windo...

Directory traversal

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

PunBB Calendar Mod <= 2.0 Multiple XSS Vulnerability

Exploit for php platform in category web applications ==================================================== PunBB Calendar Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

phpBB2 Files Uploader Mod <= 0.1.5 Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================================= phpBB2 Files Uploader Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 ...