5368 matches found
Sambar Web Server vulnerable to sourcecode disclosure due to improper parsing of scripts
Overview Sambar Webserver displays script contents instead of interpreting them when the user adds certain characters to the end of the script URL. Description Sambar Webserver is designed to handle CGI requests by interpreting CGI scripts to produce output returned to the client. However, due to...
Source code leakage in JRun
Adding some sequences to request it's possible to obtain JSP source code...
WU-IMAP 2000.287(1-2) Remote Exploit
Exploit for linux platform in category remote exploits ==================================== WU-IMAP 2000.2871-2 Remote Exploit ==================================== / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source...
WU-IMAP 2000.287(1-2) - Remote Overflow
/ 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any...
WU-IMAP 2000.287(1-2) - Remote Overflow
WU-IMAP 2000.2871-2 - Remote Overflow / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to thir...
Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II)
//////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////// ======================== Security Advisory ======================== ////////////////////////////////////////////////////////////////////////////...
Squid 2.4.1 - Remote Buffer Overflow
Squid 2.4.1 - Remote Buffer Overflow / 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
wu-ftpd <= 2.6.1 Remote Root Exploit
No description provided by source. / 7350wurm - x86/linux wuftpd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
wu-ftpd <= 2.6.1 Remote Root Exploit
Exploit for linux platform in category remote exploits ==================================== wu-ftpd = 13? ptrace inject on ppid / include include include include include include include include include include i...
Squid 2.4.1 - Remote Buffer Overflow
/ 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any form, in...
WU-FTPD 2.6.1 - Remote Command Execution
WU-FTPD 2.6.1 - Remote Command Execution / 7350wurm - x86/linux wuftpd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third...
WU-FTPD 2.6.1 - Remote Command Execution
/ 7350wurm - x86/linux wuftpd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any form, ...
JSP pages source code access
There are multiple ways to get a source code of JSP pages...
KPMG-2002016: Bea Weblogic incorrect URL parsing issues
-------------------------------------------------------------------- Title: Bea Weblogic incorrect URL parsing issues BUG-ID: 2002016 Released: 30th Apr 2002 -------------------------------------------------------------------- Problem: ======== The Bea Weblogic server incorrectly parses certain...
BEA WebLogic Null Byte Request JSP Source Disclosure
BEA WebLogic may be tricked into revealing the source code of JSP scripts by adding an encoded character %00x at the end of the request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by Renaud Deraison and is based on BEAweblogicRevealsourcecode.nasl Script audit an...
Source code retrival in Sambar
It's possible to get source code by adding space with NULL symbol to filename...
[NT] Sambar Webserver Serverside Fileparse Bypass
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
Microsoft IIS 5.0 - CodeBrws.asp Source Code Disclosure
Microsoft IIS 5.0 - CodeBrws.asp Source Code Disclosure source: https://www.securityfocus.com/bid/4525/info Microsoft IIS 5.0 ships with a sample script that may be used to view the source code of other scripts in the sample scripts /IISSAMPLES directory. However, this script CodeBrws.asp does no...
Microsoft IIS 5.0 - 'CodeBrws.asp' Source Code Disclosure
source: https://www.securityfocus.com/bid/4525/info Microsoft IIS 5.0 ships with a sample script that may be used to view the source code of other scripts in the sample scripts /IISSAMPLES directory. However, this script CodeBrws.asp does not adequately filter unicode representations of directory...
