CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1716

CVE-2011-1716 concerns Xymon Monitor’s Web UI, where multiple XSS vulnerabilities exist in versions prior to 4.3.1. The description specifies that remote attackers can inject arbitrary web script or HTML via unspecified vectors, indicating the Web UI’s insufficient input/output handling as the ro...

CVE-2011-1716

Multiple cross-site scripting XSS vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Zolsoft Office Server Free Edition Cross Site Request Forgery

!--=============================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Path for daily backup is configurable through WEB UI

It is possible to set the daily backup path and partial name through the web UI. This could mean that information can be obtained by a rouge admin. This issue addresses that by introducing a flag so concerned administrators can remove this feature. This flag is set to false by default meaning it ...

Path for daily backup is configurable through WEB UI

It is possible to set the daily backup path and partial name through the web UI. This could mean that information can be obtained by a rouge admin. This issue addresses that by introducing a flag so concerned administrators can remove this feature. This flag is set to false by default meaning it ...

Barracuda Web Application Firewall Detection (HTTP)

HTTP based detection of Barracuda Web Application Firewall. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

VideoLAN VLC Media Player 0.9.8a - Web UI input Remote Denial of Service

VideoLAN VLC Media Player 0.9.8a - Web UI input Remote Denial of Service !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target...

VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service

!/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for some reason, A x 2070785 = terminate...

VLC 0.9.8.a Denial Of Service

!/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for some reason, A x 2070785 = terminate...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== VLC 0.9.8a Web UI input Remote Denial of Service Exploit ========================================================== !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader...

CVE-2008-0071

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

Design/Logic Flaw

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071

CVE-2008-0071 affects BitTorrent before 6.0.3 build 8642 and uTorrent before 1.8beta build 10524. The flaw is in the Web UI handling of HTTP requests with a malformed Range header, allowing remote attackers to cause a denial-of-service (application crash). The vulnerability is exposed when the We...

uTorrent / BitTorrent DoS

Web UI HTTP request Range: header DoS...

Aruba Mobility Controller绕过认证及跨站脚本漏洞

BUGTRAQ ID: 29240 Aruba Mobility Controller可为企业提供移动接入解决方案。 Aruba Mobility Controllers的TACACS认证组件可能允许非授权的Web UI/SSH/Telnet访问，但TACACS不是默认的认证方式；Aruba Mobility Controllers可能提供一个基于Web的管理和captive portal接口，向这个web UI提供畸形输入可以导致向用户显示输入，导致跨站脚本攻击。 Aruba Networks Mobility Controllers 3.3.1.x Aruba Networks...

Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities Aruba Advisory ID: AID-051408 Revision: 1.0 For Public Release on 05/14/2008...

Asterisk vmail.cgi vulnerability

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...