CVE-2016-3956: Exposure of Sensitive Information to an Unauthorized Actor

The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with arbitrary requests, which allows remote HTTP servers to obtain sensitive information by reading Authorization headers...

SasCam 2.6.5 - Remote HTTP Server Crash

No description provided by source. / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! Also the free software programs provided by fl0 fl0w may be freely distributed and that the disclaimer below is always attached to it. The...

httpdx 1.5.4 - Remote HTTP Server Denial of Service

No description provided by source. !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage:...

httpdx 1.5.4 Remote HTTP Server Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage:...

Mereo 1.9.2 - Remote HTTP Server Denial of Service

Mereo 1.9.2 - Remote HTTP Server Denial of Service !/usr/bin/python Title: Mereo v1.9.2 Remote HTTP Server DoS 0day By: CwG GeNiuS Email: cwggenius at gmail dot com Tested: XPSP3 Download: http://www.ohloh.net/p/mereo import socket, sys payload ="GET /"; payload+="X" 10000; payload+="...

Mereo 1.9.2 - Remote HTTP Server Denial of Service

!/usr/bin/python Title: Mereo v1.9.2 Remote HTTP Server DoS 0day By: CwG GeNiuS Email: cwggenius at gmail dot com Tested: XPSP3 Download: http://www.ohloh.net/p/mereo import socket, sys payload ="GET /"; payload+="X" 10000; payload+=" HTTP/1.1\r\n\r\n"; count = 1; try: while count 100: s =...

CVE-2010-0652: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document...

CVE-2010-0643: Exposure of Sensitive Information to an Unauthorized Actor

Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a prox...

Backported Security Patch Detection (WWW)

Security patches may have been 'backported' to the remote HTTP server without changing its version number. Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. C Tenable Network Security, Inc...

CVE-2009-2121: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted response...

CVE-2007-4625

Polipo prior to 1.0.2 is affected. It allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request. No remediation details are provided in the supplied documents.