Lucene search
+L

3893 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/24 12:00 a.m.•4 views

CVE-2005-1697: Direct Request

The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to simplesmarty.php, which reveals the path in an error message...

5CVSS5.9AI score0.01125EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2005/05/23 12:00 a.m.•28 views

[SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3}

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS 0.760RC2,RC3 cXIb8O3.6 Author: Maksymilian Arciemowicz cXIb8O3 Date: 4.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS...

5.9AI score
SaveExploits0
NVD
NVD
•added 2005/05/02 4:00 a.m.•21 views

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

5CVSS6.8AI score0.0153EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2005/04/17 12:00 a.m.•33 views

PayProCart30.txt

This is a multi-part message in MIME format. ------=NextPart000000601C5395C.BF487B20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/04/16 12:00 a.m.•53 views

Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Http Response Splitting...

6.9AI score
SaveExploits0
CVE
CVE
•added 2005/03/26 5:00 a.m.•59 views

CVE-2005-0874

The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...

5CVSS7.2AI score0.0153EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/26 12:00 a.m.•3 views

CVE-2005-0874: Undefined Security Weakness

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

5CVSS6AI score0.0153EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/03/25 12:00 a.m.•36 views

Multiple Trillian instant messenger buffer overflows

Multiple buffer overflow on parsing HTTP-based protocols, including RSS...

4.9AI score
SaveExploits0References1Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•28 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•29 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•32 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2004/08/18 12:00 a.m.•23 views

WebGUI < 7.5.13 RSS Feed Authentication Bypass

Binary data 4559.prm...

5CVSS7.3AI score0.01508EPSS
SaveExploits0References2
Atlassian
Atlassian
•added 2004/01/19 3:03 a.m.•37 views

Add a generic HTML cleaning service

This will be able to be used by all components that need to display untrusted HTML: including HTML attachments, RSS feeds, and the html-include macro...

1.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder