Simple Web Server Connection Header Buffer Overflow Vulnerability

Simple Web Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

http-slowloris NSE Script

Tests a web server for vulnerability to the Slowloris DoS attack by launching a Slowloris attack. Slowloris was described at Defcon 17 by RSnake see . This script opens and maintains numerous 'half-HTTP' connections until the server runs out of resources, leading to a denial of service. When a...

CVE-2011-4880

Summary: CVE-2011-4880 is a directory traversal vulnerability in Certec webMI2ADS (webMI) up to version 2.0.1. The web server may allow remote attackers to read arbitrary files by sending crafted HTTP requests, leading to possible data leakage. The issue is caused by insufficient input validation...

CVE-2011-5052

Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request...

CVE-2011-4852

The CVE-2011-4852 issue affects Parallels Plesk Panel 10.4.4_build20111103.18: the Control Panel generates web pages containing external links in response to GET requests with query strings for enterprise/mobile-monitor/ and related files, enabling cross-domain referer leakage. This can allow rem...

TimThumb Cache Directory 'src' Parameter Arbitrary PHP File Upload

The version of TimThumb hosted on the remote web server allows an unauthenticated, remote attacker to upload arbitrary PHP files as specified by input to the 'src' parameter and retrieved from third- party sites to its cache directory. It's likely that these files can then be executed by requesti...

Simple web-server Directory Traversal Vulnerability

Simple web-server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further...

CVE-2011-1414

Cross-site scripting XSS vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

Exploit for macOS platform in category remote exploits ======================================================= EvoCam Web Server OSX ROP Remote Exploit Snow Leopard ======================================================= !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import...

CGI Generic Path Traversal (extended test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

PHPGenealogie 'CoupleDB.php' Remote File Inclusion Vulnerability

This host is running PHPGenealogie and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbphpgenealogierfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ PHPGenealogie 'CoupleDB.php' Remote File Inclusion Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

Hitachi Web Server Vulnerability in SSL Client Authentication

Overview Hitachi Web Server contains a vulnerability in handling SSL client certificates, which could allow an attacker to manipulate environment variables and/or spoof the client to access Web servers. Impact An attacker could manipulate environment variables and/or spoof the client to access We...

Chance-i DiViS DVR System Web-Server - Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

Easy File Sharing Web Server vfolder参数目录遍历漏洞

BUGTRAQ ID: 33973 Easy File Sharing Web Server允许访客经由浏览器上传/下载文件，拥有FTP和WEB版本。 Easy File Sharing Web Server的thumbnail.ghp模块没有正确地过滤对vfolder参数的输入便用于打开文件，远程攻击者可以通过提交特殊格式的文件请求执行目录遍历攻击，打开任意本地文件。 EFS Software Easy File Sharing Web Server 4.8 厂商补丁： EFS Software ------------...

CVE-2008-5284

The CVE-2008-5284 issue affects multiple products where the web server component can crash due to a crafted HTTP Content-Length header with a negative value. Affected are IEA Software RadiusNT/RadiusX (versions 5.1.38 up to but not including 5.1.44), Emerald (5.0.49 up to before 5.0.52), Air Mars...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Sun Java System Web Server cross-site scripting vulnerability

Overview Sun Java System Web Server originally called Sun ONE Web Server contains a cross-site scripting vulnerability. A vulnerable web server does not adequately validate the HTTP REFERER header before using the contents in the default error page. Impact A malicious script may be executed on th...

Design/Logic Flaw

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi...

weboddity-traverse.txt

Web Oddity Web Server 0.09b Directory Transversal Vulnerability Found by: Katatafish [email protected] Download: http://sourceforge.net/project/showfiles.php?groupid=13854 Thanks: str0ke use LWP::Simple; use strict; sub usage print "----------------------------------------------------- -...