Updated perl-Capture-Tiny package fixes security vulnerability

perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner CVE-2014-1875...

[Weevely] PHP Stealth Tiny Web Shell

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...

Buffer overflow

Buffer overflow in the Remote command server Rcmd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to cause a denial of service crash via a long string to TCP port 23...

CVE-2012-5344

CVE-2012-5344 affects IpTools’ Tiny TCP/IP Server (IpTools WebServer/Thttpd.bat 0.1.4). The connected data confirms a directory traversal vulnerability that allows remote reading of arbitrary files via a .. in an HTTP request. OpenVAS entries also reference a related remote buffer overflow for Ip...

CVE-2012-5345

CVE-2012-5345 affects IpTools (Tiny TCP/IP server) 0.1.4, specifically the Remote command server (Rcmd.bat). The vulnerability is a buffer overflow in the Rcmd.bat component that can be triggered remotely by sending a long string to TCP port 23, leading to a denial of service (crash). The provide...

CVE-2012-5335

Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the URI of an HTTP request...

Directory traversal

Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the URI of an HTTP request...

CVE-2012-5335

Summary: CVE-2012-5335 concerns a directory traversal in Tiny Server 1.1.5. Remote authenticated users could read arbitrary files by including a “..” in the HTTP request URI. The vulnerability is documented with a MEDIUM base score (CVSSv2: 4.0; AV:N/AC:L/Au:S/C:P/I:N/A:N) indicating network acce...

CVE-2012-5335

Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the URI of an HTTP request...

CVE-2012-5335: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the URI of an HTTP request...

am4ss Support System 1.2 PHP Code Injection Exploit

Exploit for php platform in category web applications 10/2011 , Vulnerability discovered till now , i haven't reported the vendor , why!!! The idiot backdoored it by himself + the official site is fucked up ; 19/07/2012 , Public Disclosured C:\labphp am4ss.php localhost /lab/am4ss/...

Tiny Server HTTP HEAD Request Remote Denial of Service Vulnerability

Tiny Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny Server <= 1.1.5 Information Disclosure Vulnerability - Active Check

Tiny Server is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny Server 1.1.9 - HEAD Denial of Service

Tiny Server 1.1.9 - HEAD Denial of Service !/usr/bin/python Overflow exploiting a vulnerability in Tiny Server ' sys.exit host = sys.argv1 port = sys.argv2 buffer = 'A' 100 + 'HTTP/1.0\r\n' print '\n' print ' Tiny Server = 1.1.0HTTP HEAD request overflow' print ' Written by Brock Haun' print '...

Tiny Server 1.1.9 Denial Of Service

!/usr/bin/python Overflow exploiting a vulnerability in Tiny Server ' sys.exit host = sys.argv1 port = sys.argv2 buffer = 'A' 100 + 'HTTP/1.0\r\n' print '\n' print ' Tiny Server = 1.1.0HTTP HEAD request overflow' print ' Written by Brock Haun' print ' [email protected]' print '\n' try:...

Tiny Server 1.1.9 - HEAD Denial of Service

!/usr/bin/python Overflow exploiting a vulnerability in Tiny Server ' sys.exit host = sys.argv1 port = sys.argv2 buffer = 'A' 100 + 'HTTP/1.0\r\n' print '\n' print ' Tiny Server = 1.1.0HTTP HEAD request overflow' print ' Written by Brock Haun' print ' [email protected]' print '\n' try:...

CVE-2012-1783

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...

Cross site request forgery (csrf)

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...

CVE-2012-1783

CVE-2012-1783 affects Tiny HTTP Server (Tiny Server) 1.1.9 and earlier. The vulnerability arises when processing a GET request that lacks an HTTP version number, where a long string can trigger a crash, enabling remote denial of service. The provided documents specify the affected software and th...

CVE-2012-1783

Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service crash via a long string in a GET request without an HTTP version number...