8925 matches found
Self-Executing HTML: Internet Explorer 5.5 and 6.0
Saturday, June 01, 200 The following file is an html file comprising both scripting and a complied help file .chm. We inject scripting into the actual help file which is designed to point back to the html file and execute it. Provided the html file name contains the 'word' chm in it, Internet...
PHProjekt 2.x/3.x - Authentication Bypass
source: https://www.securityfocus.com/bid/4596/info PHProjekt is a freely available, open source PHP Groupware package. It is actively maintained by the PHPProjekt Development Team. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. Some of the...
Microsoft Internet Explorer 5/6 - Self-Referential Object Denial of Service
source: https://www.securityfocus.com/bid/4564/info Microsoft Internet Explorer is vulnerable to a denial of service due to an error in handling certain self-referential definitions in HTML documents. This occurs when an object of type "text/html" is specified, with the DATA field referencing the...
CVE-2002-0095
The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...
HTTP NIDS Evasion
This plugin configures Nessus for NIDS evasion see the 'Prefs' panel. NIDS evasion options are useful if you want to determine the quality of the expensive NIDS you just bought. HTTP evasion techniques : - HEAD: use HEAD method instead of GET - URL encoding: - Hex: change characters to %XX - MS...
BSCW 3.44.0 - Insecure Default Installation
BSCW 3.44.0 - Insecure Default Installation source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number ...
BSCW 3.4/4.0 - Insecure Default Installation
source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number of Unix variants. The default installation...
PHP local DoS: self-fetching throught HTTP
PHP scripting allows "opening" files througth HTTP: $file=fopen"http://host/page.html","r"; If script opening itself throught HTTP, it will result in DoS attack: as much as possible HTTP connections and great number of executing PHP scripts. Timeout settings are useless. Possible solutions: -...
CVE-2000-1146
Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd...
Cisco Bug
Hello, I found what I think is an undocumented bug of at least the cisco 760 series, I tried to report it to cisco but they are always busy and english is one of my weak points. The bug: When you open about 98 connections to the port 23 of a Cisco 760 router it does a self reboot disconnecting it...
backhoe.article
backhoe article, by miff 1. what is it? backhoe is a backdoor daemon that copies a rootshell into /tmp periodically, then deletes it. You set the frequency that you want rootshells to appear, and you set the amount of time that they will persist before backhoe deletes them. This gives the user wh...
Linux imapd - Remote Overflow File Retrieve
Linux imapd - Remote Overflow File Retrieve / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code is doing open, write, and close system calls, and it adds a line root::0:0.. at the beggining of /etc/passwd change to /etc/shadow if needed. The code needs to ...
DUO-PSA-2017-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2017-001 Publication Date: 2017-03-14 Revision Date: 2017-03-14 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue in our cloud service which, under certain configurations, could have enabled attackers wh...
System Center Virtual Machine Manager 2008 R2 Update (KB976244)
This update resolves multiple issues including cluster refresh performance, networking, and Self Service issues, as described in KB article 976244...
Update Rollup 4 for System Center 2012 Virtual Machine Manager Self-Service Portal (x64) (KB2791327)
This update fixes the problems described in KB article 2785681...
Update Rollup 1 for System Center 2012 Virtual Machine Manager Self Service Portal (KB2663961)
This update fixes the problems described in KB Article 2686249...
Windows1124H2Server
Test Pass self-hosting content...
SCVMM 2008 R2 SP1 Self-Service Portal (32 bit)
...
