EUVD-1999-1528

Malware in sbrugna...

SquidGuard 1.x NULL URL Character Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs. Successful exploitation of...

Ruby Gem Fastreader 1.0.8 Code Execution

Ruby gem fastreader-1.0.8 remote code exec 3/6/2013 if the url contains any ; characters code will be executed as the user. for example if fastreader is fed http://www.g;id;.com id will be executed. ./fastreader-1.0.8/lib/entrycontroller.rb .strip only removes whitespace before and after the URL...

Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access

source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to attacker-specified resources. The vulnerability presents itself...

Key Focus KF Web Server 1.0.2 - Directory Contents Disclosure

Key Focus KF Web Server 1.0.2 - Directory Contents Disclosure source: https://www.securityfocus.com/bid/5177/info It has been reported that version 1.0.2 of KF Web Server discloses the contents of directories when a certain character is present in the URL. If a remote attacker appends the "%00"...