7874 matches found
CVE-2005-0886
Cross-site scripting XSS vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request...
CVE-2005-0674
The CVE-2005-0674 entry concerns the paBox 1.6 News module, where a cross-site scripting (XSS) flaw exists in the News module’s handling of the hidden text parameter in an HTTP POST. The connected documents corroborate an XSS issue affecting paBox/Nuke-based deployments (e.g., Nessus plugin refer...
CVE-2005-0645
Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...
WebMod Half-Life dedicated server plugin integer overflow
Integer overflow with Content-Length: POST request...
Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service
Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service source: https://www.securityfocus.com/bid/12595/info Thomson TCW690 cable modem is reported prone to multiple remote vulnerabilities. These issues may allow an attacker to cause a denial of service condition and/or gain unauthorized...
Thomson TCW690 POST Password Validation Exploit
No description provided by source. / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK murdok.lnx at gmail.com Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690...
Thomson TCW690 POST Password Validation Exploit
Exploit for hardware platform in category remote exploits =============================================== Thomson TCW690 POST Password Validation Exploit =============================================== / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software...
CVE-2005-0334
Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service device crash via an HTTP POST request containing an unknown parameter without a value...
DEBIAN-CVE-2004-1899
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...
CVE-2004-1899
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...
Fwd: OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability
From: dila [email protected] Date: Wed, 15 Dec 2004 02:27:40 +0000 Subject: OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability To: [email protected], [email protected] 13.12.04 OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability The...
Cherokee Web Server Malformed POST Request Remote DoS
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is affected by a remote denial of service vulnerability when handling a specially crafted HTTP 'POST' request. An attacker may exploit this flaw to disable this service remotely. C Tenable Networ...
OmniHTTPd Pro Long POST Request DoS
The remote host is running OmniHTTPd Pro HTTP Server. The remote version of this software seems to be vulnerable to a buffer overflow when handling specially long POST request. This may allow an attacker to crash the remote service, thus preventing it from answering legitimate client requests. C...
CVE-2004-0774
The CVE-2004-0774 entry concerns RealNetworks Helix Universal Server (Linux 9.0.2; Windows 9.0.3) where remote attackers could cause a denial of service by sending a POST with Content-Length: -1. The root cause is improper handling of a crafted Content-Length value, leading to excessive memory an...
Helix Universal Server Remote Integer Handling DoS
The remote host is running Helix Universal Server, a digital media delivery platform. There is a flaw in the remote version of this software that could allow an attacker to crash this service by sending a malformed POST request to the remote host. C Tenable Network Security, Inc...
[Full-Disclosure] iDEFENSE Security Advisory 10.07.04: RealNetworks Helix Server Content-Length Denial of Service Vulnerability
RealNetworks Helix Server Content-Length Denial of Service Vulnerability iDEFENSE Security Advisory 10.07.04: www.idefense.com/application/poi/display?id=151&type=vulnerabilities October 7, 2004 I. BACKGROUND RealNetworks Helix Universal Server is a universal digital media delivery platform with...
MyServer HTTP POST Request Remote Overflow DoS
The remote host is running MyServer, an open source web server. The installed version is vulnerable to remote denial of service attack. Using a specially crafted HTTP POST request to 'index.html' when 'View' is set to 'Logon', an unauthenticated, remote attacker can cause the server to stop...
MyServer 0.7.1 - 'POST' Denial of Service
// PoC to crash the server // / MyServer 0.7.1 POST Denial Of Service vendor URL: http://www.myserverproject.net coded and discovered by: badpack3t for .:sp research labs:. www.security-protocols.com 9.20.2004 Tested on Mandrake 10.0 usage: sp-myserv-0.7.1 targetport default is 80 / include inclu...
SnipSnap 0.5.2 - HTTP Response Splitting
source: https://www.securityfocus.com/bid/11180/info SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to manipulate how POST requests are handled...