Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Usage Info python exploit.py http://127.0.0.1:80 flag.txt -- coding: utf-8 -- import urllib2 import sys Tiny Server v1.1.9 Arbitrary File Disclosure Exploit def banner: print "\0331m\03392mTiny Server v1.1.9 Arbitrary File Disclosure Exploit" print "Exploit Write by Yahya Tanisik" print "Contact ...

Tiny HTTP Server <= 1.1.9 Path Traversal Vulnerability - Active Check

Tiny HTTP server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits !/usr/bin/perl -w Title : Tiny Server v1.1.9 Arbitrary File Disclosure Exploit Download : http://tinyserver.sourceforge.net/tinyserverfull.zip Author : ZoRLu Test : Windows7 Ultimate Date : 29/11/2014 BkiAdam : Dr.Ly0n, KnocKout, LifeSteaLe...

Tiny Server 1.1.9 Arbitrary File Disclosure

!/usr/bin/perl -w Title : Tiny Server v1.1.9 Arbitrary File Disclosure Exploit Download : http://tinyserver.sourceforge.net/tinyserverfull.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultimat...

XOOPS Module Tiny Event Remote SQL Injection (CVE-2007-1811)

An SQL injection vulnerability has been reported in Chapi Tiny Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Amazon Linux AMI : perl-Capture-Tiny (ALAS-2014-358)

"It was found 1 that the Capture::Tiny module, provided by the perl-Capture-Tiny package, used the File::temp::tmpnam module to generate temporary files : ./lib/Capture/Tiny.pm: $stash-flagfiles$which = scalar tmpnam C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

DEBIAN-CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

UBUNTU-CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1875

CVE-2014-1875 affects the Perl Capture::Tiny module up to version 0.23 (pre-0.24). The root cause is a symlink-attack in the temporary file creation path using File::temp::tmpnam, allowing local users to write to arbitrary files. Remediation: upgrade to Capture-Tiny 0.24 or later (per the public ...

CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1875: Improper Link Resolution Before File Access

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-5818

The Tiny Tower aka com.mobage.ww.a560.tinytowerandroid application 1.7.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Tiny Tower aka com.mobage.ww.a560.tinytowerandroid application 1.7.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5818

CVE-2014-5818 affects the Android app Tiny Tower (com.mobage.ww.a560.tinytower_android) v1.7.0.8. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause:...

CVE-2014-5599

The Tiny Farm aka com.com2us.tinyfarm.normal.freefull.google.global.android.common application 2.02.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Tiny Farm aka com.com2us.tinyfarm.normal.freefull.google.global.android.common application 2.02.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...