MonkeyWeb POST with too much data

Your web server crashes when it receives a POST command with too much data. It may even be possible to make this web server execute arbitrary code with this attack. OpenVAS Vulnerability Test $Id: monkeywebtoobigpost.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MonkeyWeb POST with too muc...

Shambala web server DoS

It was possible to kill the web server by sending a malicious request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

YaPiG Remote Server-Side Script Execution Vulnerability

The remote web server contains a PHP application that is prone to arbitrary PHP code injection vulnerabilities. Description : The remote host is running YaPiG, a web-based image gallery written in PHP. The remote version of YaPiG may allow a remote attacker to execute malicious scripts on a...

Athena Web Registration remote command execution flaw

The remote host is running Athena Web server. The remote version of this software is vulnerable to remote command execution flaw through the athenareg.php script. A malicious user could execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id: athenawebremotecmdexec.nasl 8023...

Multiple X servers fail to properly allocate memory for large pixmaps

Overview Multiple X Window System servers contain a pixmap memory allocation flaw that may allow local users to execute code with elevated privileges. Description Multiple X Window System server applications share code that may contain a flaw in the memory allocation for large pixmaps. The affect...

CUPS Server 1.1 - GET Denial of Service

CUPS Server 1.1 - GET Denial of Service / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL =...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

simpleproxy proxy server format string vulnerability

Format string bug on parent HTTP proxy server reply parsing...

ezUpload 2.2 - 'index.php?path' Remote File Inclusion

source: https://www.securityfocus.com/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-side...

CVE-2002-1866

The CVE-2002-1866 issue affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The underlying root cause is that the server does not close file descriptors for 404 error responses, which can lead to resource exhaustion (denial of service) when an attacker issues numerous requests for non-e...

JBoss Malformed HTTP Request Remote Configuration Information Disclosure

Binary data 3021.prm...

Vulnerability: Bitrix Php inclusion

Vendor: Bitrix Product: Bitrix Site Manager 4.0.x Vulnerability: php including. Consequence: custom php code execution on server Risk: Critical Description: Due to unfiltered SERVERDOCUMENTROOT variable in file “bitrixmodulesmainstart.php”, hacker can upload php script from other server and execu...

Arbitrary code execution in eping plugin

www.RedC0de.org found the following error in eping: Details ------- Advisory name: Arbitrary code execution in eping plugin Advisory number: 1 Application: eping Aplication author: apnovi3 Security-Risk: high - very high Remote-Exploit: Yes Discovered by: m00fd1 aka Tr|p Introduction ------------...

Warrior Kings: Battles 1.23 - Remote Denial of Service

source: https://www.securityfocus.com/bid/13712/info Warrior Kings: Battles is susceptible to a remote denial of service vulnerability. This is due to a failure of the game server to properly handle exceptional conditions. This vulnerability allows remote attackers to crash affected game servers,...

web-app.org WebAPP Encoded Request .dat File Disclosure

According to its banner, the remote host is running a version of WebAPP that suffers from an unspecified file disclosure vulnerability. An attacker may be able to use this flaw to disclose the contents of 'dat' files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

War Times - Remote Game Server Denial of Service

source: https://www.securityfocus.com/bid/13652/info War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size memory buffer. This vulnerability...

CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2004-0533

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client...

All4WWW-HomePageCreator 1.0 - index.php Remote File Inclusion

All4WWW-HomePageCreator 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/13169/info All4WWW-Homepagecreator is affected by an arbitrary remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input befo...

USN-105-1: PHP4 vulnerabilities

Two Denial of Service vulnerabilities have been discovered in the getimagesize function. getimagesize uses format specific internal functions phphandleiff and phphandlejpeg which get stuck in infinite loops when certain invalid size parameters are read from the image. In web applications that all...