1370 matches found
Technical Note by Amit Klein: "XST Strikes Back"
Technical note XST Strikes Back or perhaps "Return from the Proxy"... Amit Klein, January 2006 Introduction ============ About three years ago, the concept of "Cross Site Tracing" 1 was introduced to the web application security community. In essence, the classic XST is about amplifying an existi...
CVE-2006-0144
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function...
CVE-2006-0144
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function...
Code injection
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function...
CVE-2006-0144
CVE-2006-0144 affects PHP PEAR 0.2.2 (used in Apache2Triad). The proxy server feature in go-pear.php can be redirected to a malicious proxy server that serves a modified Tar.php containing a malicious extractModify function, enabling remote attackers to execute arbitrary PHP code. The description...
CVE-2006-0144
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function...
CVE-2005-4806
Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service unresponsive service via unknown vectors...
CVE-2005-3506
Cross-site scripting XSS vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the 1 Remote Proxy Server or 2 Proxy Filter IPs field...
ISA Server 2000 and Proxy Server 2.0 Internet Content Spoofing (888258)
The ISA Server 2000 and Proxy Server 2.0 have been found to be vulnerable to a spoofing vulnerability that could enable an attacker to spoof trusted Internet content. Users could believe they are accessing trusted Internet content when in reality they are accessing malicious Internet content, for...
Squid DoS Vulnerability
A problem exists in the way the remote Squid proxy server handles a special SPDX-FileCopyrightText: 2001 Adam Baldwin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MoonLit Virus Backdoor
The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. SPDX-FileCopyrightText: 2004 KK Liu Some text descriptions might be excerpted from a referenced sources, and are...
Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)
The remote host is running a version of the Outlook Web Access which contains cross site scripting flaws. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Squid proxy server DoS
Server crash on parsing FTP Server response...
Sun Java System Web Proxy Server Multiple Unspecified Remote DoS
The remote host is running Java System Web Proxy Server / Sun ONE Web Proxy Server. According to its banner, the installed Web Proxy Server reportedly suffers from an unspecified remote denial of service vulnerability. By exploiting this flaw, an attacker could cause the affected application to...
[SA16757] Sun Java System Web Proxy Server Denial of Service Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Sun Java System Web Proxy Server DoS
Three different vulnerabilities leading to server crash...
ZipTorrent BitTorrent client information leak
Proxy server path is stored in local readable file...
ZipTorrent 1.3.7.3 - Local Proxy Password Disclosure
ZipTorrent 1.3.7.3 - Local Proxy Password Disclosure /================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected]...
apache -- http request smuggling
A Watchfire whitepaper reports an vulnerability in the Apache webserver. The vulnerability can be exploited by malicious people causing cross site scripting, web cache poisoining, session hijacking and most importantly the ability to bypass web application firewall protection. Exploiting this...