Apache mod_perl 'Apache::Status'和'Apache2::Status'跨站脚本漏洞

BUGTRAQ ID: 34383 CVE ID：CVE-2009-0796 CNCVE ID：CNCVE-20090796 Apache是一款开放源代码的WEB服务程序。 Apache modperl 'Apache::Status'和'Apache2::Status'存在跨站脚本攻击，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 Apache Software Foundation modperl 2.0.4 Apache Software Foundation modperl 2.0.3 Apache Software Foundation modperl...

CVE-2009-0240

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter...

CVE-2009-0240

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter...

Security fix for the ALT Linux 9 package libxml2 version 1:2.7.2-alt2

Nov. 25, 2008 Alexey Tourbin 1:2.7.2-alt2 - updated to svn revision 3803 fixes CVE-2008-4225, CVE-2008-4226...

Code injection

The expandquotedtext function in libs/SmartyCompiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and 1 a dollar-sign character, aka "php executed in templates;" and 2 a double quoted literal string, aka a "function...

Python Multiple Vulnerabilities (Windows)

The host is installed with Python, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpythonmultvulnwin900105.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: Python Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright C 2008 SecPod,...

Python Multiple Vulnerabilities (Linux)

The host is installed Python, which is prone to multiple vulnerabilities. This NVT has been replaced by NVT gbCESA-20091176pythoncentos5i386.nasl OID:1.3.6.1.4.1.25623.1.0.880881, gbCESA-20091178pythoncentos3i386.nasl OID:1.3.6.1.4.1.25623.1.0.880715. OpenVAS Vulnerability Test $Id:...

Apache HTTP Server 'mod_proxy_ftp' Wildcard Characters XSS Vulnerability

Apache HTTP Server is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

.svn/entries Disclosed via Web Server

The web server on the remote host allows read access to '.svn/entries' files. This exposes all file names in your svn module on your website. This flaw can also be used to download the source code of the scripts PHP, JSP, etc... hosted on the remote server. %NASLMINLEVEL 70300 Changes by Tenable ...

reSIProcate 1.3.2 Remote Denial of Service PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any produ...

reSIProcate 1.3.2 - Remote Denial of Service (PoC)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any product using the reSIProcate SIP stack...

Fedora 8 : gallery2-2.2.4-3.fc8 (2008-2650)

Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger 2.2.4-1 - A christmas present -- critical security update to 2.2.4 Note that Tenable...

GLSA-200803-29 : ViewVC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-29 ViewVC: Multiple vulnerabilities Multiple unspecified errors were reportedly fixed by the ViewVC development team. Impact : A remote attacker could send a specially crafted URL to the server to list CVS or SVN commits on...

VLC highlander bug

The old buffer-overflow in the subtitles handled by VLC has not been fully patched in version 0.8.6e, in fact buffertext2 in ParseSSA is still unchecked: if sscanf s, "Dialogue: ^,,d:d:d.d,d:d:d.d,81920^rn", buffertext2, The funny thing is that my old proof-of-concept was built just to test this...

seclog-2007-001.txt

-- ---------- ---- - ---------------------------- ---------- ---- -- ----------------------------- ------------- ---seclog- ------------------ ------------ -- --- ------------------- --------- ---- ------------------- ------- -------------------------- --- -------------- ----------- ---...

NoseRub <= 0.5.2 Login SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== NoseRub = 0.5.2 Login SQL Injection Vulnerability ================================================== -- ---------- ---- - ---------------------------- ---------- ---- --...

CVE-2007-6454

Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request...

CVE-2007-6350

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...

Design/Logic Flaw

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...

CVE-2007-6350

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...