CVE-2006-1547

ActionForm in Apache Software Foundation ASF Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to...

CVE-2006-1548

CVE-2006-1548 is an XSS vulnerability in Apache Struts prior to 1.2.9. The flaw allows remote attackers to inject arbitrary script/HTML via the request parameter name in LookUpDispatchAction, and possibly DispatchAction and ActionDispatcher, with the error message not filtering the input. Connect...

CVE-2006-1546

CVE-2006-1546 : Apache Struts 1.x before 1.2.9 is vulnerable to bypassing validation via a request param org.apache.struts.taglib.html.Constants.CANCEL, causing the action to be canceled but may not be detected by applications that skip isCancelled(). Affects Struts 1.x components and can lead to...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

Lutece XSS vuln.

Lutece XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/lutece-xss-vuln.html vendor:http://lutece.paris.fr affected version:1.2.3 and prior Product Description: Lutece is a web portal engine that lets you quickly create internet or intran...

Record route

This plugin sends packets with the 'Record Route' option. It is a complement to traceroute. OpenVAS Vulnerability Test $Id: recordroute.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Record route Authors: Michel Arboi Copyright: Copyright C 2004 Michel Arboi This program is free software; y...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

CuteNews index.php XSS

The remote web server contains a PHP script that is prone to cross-site scripting attacks. Description : The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce a user to browse to ...

Horde IMP status.php3 XSS

The remote host is running at least one instance of Horde IMP in which the status.php3 script is vulnerable to a cross site scripting attack since information passed to it is not properly sanitized. OpenVAS Vulnerability Test $Id: impstatusxss.nasl 6053 2017-05-01 09:02:51Z teissa $ Description:...

Easy Message Board Command Execution

The remote host is running Easy Message Board, a bulletin board system written in perl. The remote version of this script contains an input validation flaw which may be used by an attacker to perform a directory traversal attack or execute arbitrary commands on the remote host with the privileges...

Microsoft Windows XP SP2 - 'rdpwd.sys' Remote Kernel Denial of Service

// get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0ke // // Windows XP SP2 'rdpwd.sys' Remote Kernel DoS // // Discovered by: // Tom Ferris // tommyatsecurity-protocolsdotcom // // Tested on: // Microsoft Windows XP SP2 // // Usage SPIKE : ./genericsendtcp 192.168.1.1...

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx...

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx sec-consult - http://www.sec-consult.com/184.html Solution : Set Internet and...

MS Internet Explorer DHTML Object Memory Corruption Exploit

Exploit for unknown platform in category remote exploits =========================================================== MS Internet Explorer DHTML Object Memory Corruption Exploit =========================================================== This program is free software; you can redistribute it and/o...

[SECURITY] [DSA 689-1] New mod_python packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

DSA-689-1 libapache-mod-python - missing input sanitising

Bulletin has no description...

mod_python -- information leakage vulnerability

Mark J Cox reports: Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation modpython. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extr...

Apache HTTP Server contains a buffer overflow in the mod_proxy module

Overview Apache Web Server contains a buffer overflow vulnerability in the modproxy module that may allow a remote attacker to execute arbitrary code or launch a denial of service DoS attack. Description The Apache Server is an open-source web server offered by The Apache Software Foundation. The...

Debian DSA-452-1 : libapache-mod-python - denial of service

The Apache Software Foundation announced that some versions of modpython contain a bug which, when processing a request with a malformed query string, could cause the corresponding Apache child to crash. This bug could be exploited by a remote attacker to cause a denial of service. %NASLMINLEVEL...