PowerStore™ 3 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.webassist.com/php-scripts-and-solutions/powerstore/ orginal advisory:http://pridels-team.blogspot.com/2010/09/powerstore-3-xss-vuln.html affected versions:PowerStore™ 3 and other versions also can be affected. PowerStore™ 3...

iBoutique.MALL 1.2 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/mall/ orginal advisory:http://pridels-team.blogspot.com/2010/09/iboutiquemall-12-xss-vuln.html affected versions:iBoutique.MALL 1.2and other versions also can be affected. iBoutique.MALL 1.2 contains a flaw that...

NetArtMEDIA Real Estate Portal v2.0 XSS vuln. + NetArtMEDIA lfi.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/realestate/ original advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html affected versions:NetArtMEDIA Real Estate Portal v2.0 and other versions also can be affected...

Open Classifieds version 1.7.0.2 XSS Vuln.

Vuln. discovered by : r0t Date: 12 September 2010 vendor:http://open-classifieds.com/ orginal advisory:http://pridels-team.blogspot.com/2010/09/open-classifieds-version-1702-xss-vuln.html affected versions:Open Classifieds version 1.7.0.2 Open Classifieds version 1.7.0 and other prior versions al...

NetArtMEDIA Car Portal v2.0 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/carsportal/ orginal advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-car-portal-v20-xss-vuln.html affected versions:v2.0 and other versions also can be affected. NetArtMEDIA Car Portal contains a flaw...

Member Management System v 4.0 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.expinion.net/Applications/MMSoverview.asp orginal advisory:http://pridels-team.blogspot.com/2010/09/member-management-system-v-40-xss-vuln.html affected versions:v 4.0 and other versions also can be affected. Member Management...

Squid代理字符串处理空指针引用漏洞

BUGTRAQ ID: 42982 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 某些Squid内部字符串处理例程没有正确地检查空指针，远程攻击者可以通过发送恶意请求导致拒绝服务。 Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 1 将ignoreexpect10...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

CVE-2010-2385

CVE-2010-2385 affects Sun Java System Web Proxy Server 4.0.13. The vulnerability is described as unspecified and exploitable remotely via the Administration Server (HTTP). The CVE is listed with a base score of 5.8 (Medium) and is included in the Oracle July 2010 Critical Patch Update advisory, w...

DirectAdmin <= v1.35.1 XSS vuln.

DirectAdmin = v1.35.1 XSS vuln. Vuln. discovered by : r0t Date: 15 March 2010 vendor:http://www.directadmin.com/ affected versions:v1.35.1 and other versions also can be affected. orginal advisory:http://pridels-team.blogspot.com/2010/03/directadmin-v1351-xss-vuln.html DirectAdmin contains a flaw...

Squid Web代理缓存HTCP请求远程拒绝服务漏洞

BUGTRAQ ID: 38212 CVE ID: CVE-2010-0639 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 远程攻击者可以通过向Squid的HTCP端口发送畸形报文触发空指针引用，导致Squid崩溃。 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.x 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 对于Squid-2.x 明确配置htcpport...

Debian DSA-1991-1 : squid/squid3 - denial of service

Two denial of service vulnerabilities have been discovered in squid and squid3, a web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2855 Bastian Blank discovered that it is possible to cause a denial of service via a crafted auth header wit...

Debian DSA-2002-1 : polipo - denial of service

Several denial of service vulnerabilities have been discovered in polipo, a small, caching web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3305 A malicous remote server could cause polipo to crash by sending an invalid Cache-Control heade...

[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1991-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 04, 2010 http://www.debian.org/security/faq -...

DSA-1991-1 squid squid3 - denial of service

Bulletin has no description...

Sun Java System Web Server 6.17.0 - TRACE Heap Buffer Overflow (PoC)

Sun Java System Web Server 6.17.0 - TRACE Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/37648/info Sun Java System Web Server is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to crash the affected application or to obtain...

Squid Gopher Protocol Handling Buffer Overflow (CVE-2005-0094)

Squid is a full featured, open source web proxy caching server. It supports proxying of variety of protocols including FTP, HTTP, DNS and Gopher. A vulnerability exists in the way Squid web proxy handles responses from Gopher servers. An overly long line in a Gopher response can overflow a fixed...

Microsoft ISA Server HTTP Content Header (MS05-034; CVE-2005-1215)

The Microsoft Internet Security and Acceleration ISA Server is a firewall and web proxy caching server. While relaying client requests to upstream servers, ISA will keep a copy of the returned content in its cache. When unchanged resources are later requested by web clients, the content is served...