5314 matches found
LiteSpeed Web Server <= 3.2.3 Remote Source Code Disclosure Vuln
No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.||||...
Litespeed Web Server 3.2.3 - Source Code Disclosure
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...
LiteSpeed Web Server <= 3.2.3 Remote Source Code Disclosure Vuln
Exploit for multiple platform in category remote exploits ================================================================ LiteSpeed Web Server = 3.2.3 Remote Source Code Disclosure Vuln ================================================================ | | |--.-----.| .-----.'...
Litespeed Web Server 3.2.3 - Source Code Disclosure
Litespeed Web Server 3.2.3 - Source Code Disclosure | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats...
CVE-2003-1408
Technical details about CVE-2003-1408 (affected product/version, root cause, impact, patch) are not provided in the supplied documents. Monitor for updates.
CVE-2003-1408
Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...
Design/Logic Flaw
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...
CVE-2007-5473
The CVE-2007-5473 entry concerns Mono before 1.2.5.2. StaticFileHandler.cs in System.Web on Windows fails to properly handle a request trailing with a space or dot in XSP, allowing remote attackers to disclose source code of sensitive files. Affected component: Mono’s System.Web.StaticFileHandler...
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities
source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...
openSUSE 10 Security Update : mono-core (mono-core-2392)
By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2392...
eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow
eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow / extremail-v6.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 2048 define BBUFSIZE BUFSIZE/34+1 define NOP 0x41 define AUTHCMD "1 AUTHENTICATE PLAIN\n" define DEFPORT 143 define PORTIMAPD DEFPORT...
eXtremail <= 2.1.1 memmove() Remote Denial of Service Exploit
Exploit for linux platform in category dos / poc ============================================================= eXtremail eXtremail 1,50 $maxlen = intrand50 + 1; 0, $maxlen 0.75 - 0, $maxlen 0x75 - 1 $pad1len = intrand$maxlen 0.75; 0, $maxlen - $pad1len/2 - 1, $maxlen - $pad1len/2 $pad2len =...
CVE-2007-5431
include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...
php524ioncube-bypass.txt
ionCube output:"; echo $MyBootioncube; ?...
PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass
Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...
PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass
ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...
PHP 5.2.4 ionCube - ioncube_read_file Safe Mode Disable Functions Bypass
PHP 5.2.4 ionCube - ioncubereadfile Safe Mode Disable Functions Bypass ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...
Directory Image Gallery XSS vuln.
Sunday, 7 October 2007 Directory Image Gallery XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://splitside.net/store/index.php?mainpage=productinfo&productsid=1 affected versions:Directory Image Gallery 1.1 other versions also can be affected. Directory Image Gallery contains...
Wikepage XSS vuln
Sunday, 7 October 2007 Wikepage XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.wikepage.org/ affected versions:Wikepage Opus 13 2007.2 other versions also can be affected. Wikepage contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...
Apple Safari / iPhone crossite access
Script can access source code of the page from different domain...