php: DoS when using HTTP proxy with the FTP wrapper

Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper...

Squid: Multiple vulnerabilities

Background Squid is a full-featured web proxy cache. Description Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact Remote unauthenticated attackers may be able to execute arbitrary code with the privileges of the Squid...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

CVE-2011-0846

Unspecified vulnerability in the Oracle Sun Java System Access Manager Policy Agent 2.2 allows remote attackers to affect availability via unknown vectors related to Web Proxy Agent...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Sun Java System Access Manager Policy Agent 2.2 allows remote attackers to affect availability via unknown vectors related to Web Proxy Agent...

DSA-2111-1 squid3 - denial of service

Bulletin has no description...

NetArtMEDIA Real Estate Portal v2.0 XSS vuln. + NetArtMEDIA lfi.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/realestate/ original advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html affected versions:NetArtMEDIA Real Estate Portal v2.0 and other versions also can be affected...

PowerStore™ 3 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.webassist.com/php-scripts-and-solutions/powerstore/ orginal advisory:http://pridels-team.blogspot.com/2010/09/powerstore-3-xss-vuln.html affected versions:PowerStore™ 3 and other versions also can be affected. PowerStore™ 3...

Open Classifieds version 1.7.0.2 XSS Vuln.

Vuln. discovered by : r0t Date: 12 September 2010 vendor:http://open-classifieds.com/ orginal advisory:http://pridels-team.blogspot.com/2010/09/open-classifieds-version-1702-xss-vuln.html affected versions:Open Classifieds version 1.7.0.2 Open Classifieds version 1.7.0 and other prior versions al...

iBoutique.MALL 1.2 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/mall/ orginal advisory:http://pridels-team.blogspot.com/2010/09/iboutiquemall-12-xss-vuln.html affected versions:iBoutique.MALL 1.2and other versions also can be affected. iBoutique.MALL 1.2 contains a flaw that...

NetArtMEDIA Car Portal v2.0 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/carsportal/ orginal advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-car-portal-v20-xss-vuln.html affected versions:v2.0 and other versions also can be affected. NetArtMEDIA Car Portal contains a flaw...

Member Management System v 4.0 XSS vuln.

Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.expinion.net/Applications/MMSoverview.asp orginal advisory:http://pridels-team.blogspot.com/2010/09/member-management-system-v-40-xss-vuln.html affected versions:v 4.0 and other versions also can be affected. Member Management...

Squid代理字符串处理空指针引用漏洞

BUGTRAQ ID: 42982 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 某些Squid内部字符串处理例程没有正确地检查空指针，远程攻击者可以通过发送恶意请求导致拒绝服务。 Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 1 将ignoreexpect10...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

CVE-2010-2385

CVE-2010-2385 affects Sun Java System Web Proxy Server 4.0.13. The vulnerability is described as unspecified and exploitable remotely via the Administration Server (HTTP). The CVE is listed with a base score of 5.8 (Medium) and is included in the Oracle July 2010 Critical Patch Update advisory, w...

DirectAdmin <= v1.35.1 XSS vuln.

DirectAdmin = v1.35.1 XSS vuln. Vuln. discovered by : r0t Date: 15 March 2010 vendor:http://www.directadmin.com/ affected versions:v1.35.1 and other versions also can be affected. orginal advisory:http://pridels-team.blogspot.com/2010/03/directadmin-v1351-xss-vuln.html DirectAdmin contains a flaw...

Squid Web代理缓存HTCP请求远程拒绝服务漏洞

BUGTRAQ ID: 38212 CVE ID: CVE-2010-0639 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 远程攻击者可以通过向Squid的HTCP端口发送畸形报文触发空指针引用，导致Squid崩溃。 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.x 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 对于Squid-2.x 明确配置htcpport...

Debian DSA-1991-1 : squid/squid3 - denial of service

Two denial of service vulnerabilities have been discovered in squid and squid3, a web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2855 Bastian Blank discovered that it is possible to cause a denial of service via a crafted auth header wit...