5657 matches found
Blog Torrent preview 0.8 - arbitary file download
Intro ----- Blogtorrent is a collection of PHP scripts which are designed to make it simple to host files for transfer via bittorrent. Whilst it is not normal to report security problems in "preview" releases of software this software was covered prominently upon Slashdot and could be widely used...
GFHost PHP GMail Remote Command Execution Exploit
No description provided by source. GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...
GFHost PHP GMail - Remote Command Execution
GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...
GFHost PHP GMail Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================= GFHost PHP GMail Remote Command Execution Exploit ================================================= GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This...
GFHost.pl
GFHost explo Spawn bash style Shell with webserver uid Greetz SPAX, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; $U1 =...
[SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 594-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2004 http://www.debian.org/security/faq -...
security flaw
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...
CVE-2004-0942
CVE-2004-0942 affects Apache 2.0.52 and earlier. A remote attacker can trigger a denial of service by sending an HTTP GET with a MIME header containing many lines of whitespace, causing CPU/memory consumption. Public references show patches and advisories across platforms (e.g., ALT Linux package...
CVE-2004-0942
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...
CVE-2004-0942
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...
CVE-2004-0942: Undefined Security Weakness
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...
Debian DSA-080-1 : htdig - unauthorized gathering of data
Nergal reported a vulnerability in the htsearch program which is distributed as part of the ht://Dig package, an indexing and searching system for small domains or intranets. Using former versions it was able to pass the parameter -c to the cgi program in order to use a different configuration...
BadBlue Webserver v2.5 Denial Of Service Vulnerability
GulfTech Security Research August, 18th 2004 Vendor : BadBlue URL : http://www.badblue.com Version : BadBlue Webserver v2.5 Risk : Denial of Service Description: Share photos, videos, music, and business files with friends and colleagues instantly. Tired of paying a service to share your files an...
Xedus Webserver Multiple XSS
The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2001-0749
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...
CVE-2001-0749
The CVE-2001-0749 issue affects Beck IPC GmbH IPC@CHIP Embedded-Webserver. The vulnerability allows remote attackers to read arbitrary files because the web server default root directory is set to the system root ("/"), enabling access to files outside the web root (e.g., chip.ini with login cred...
CVE-2001-0749: Undefined Security Weakness
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...
Pi3Web Webserver < 2.0.3 HTTP GET Request Overflow DoS
Binary data 2184.prm...
GLSA-200402-03 : Monkeyd Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200402-03 Monkeyd Denial of Service vulnerability A bug in the URI processing of incoming requests allows for a Denial of Service to be launched against the webserver, which may cause the server to crash or behave sporadically...