CVE-2000-0401: Undefined Security Weakness

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

Alert: DNewsWeb buffer overflow

Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...

Buffer overflows in Skyline/SpinBox client

There are some buffer overflows in SpinBox/1.1 from the spinserver.conf. SpinBox is an SSI/cgi-tool used by advertisement companies, made by Skyline. Since this is closed source software, I can't post the sources. The buffer overflows are mostly in the query string strcat and strcpy instead of...

CVE-1999-0178

Buffer overflow in the win-c-sample program win-c-sample.exe in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string...

CVE-1999-0178: Undefined Security Weakness

Buffer overflow in the win-c-sample program win-c-sample.exe in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

Apache .htaccess Persistence

This module writes a persistence payload into an Apache .htaccess file using modcgi. The .htaccess file itself acts as a CGI shell, executing commands passed via the query string. Inspired by the htshells project by wireghoul. Module Options msf use exploit/linux/persistence/apache/htaccess msf...