Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

Directory traversal

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

CVE-2012-5344

CVE-2012-5344 affects IpTools’ Tiny TCP/IP Server (IpTools WebServer/Thttpd.bat 0.1.4). The connected data confirms a directory traversal vulnerability that allows remote reading of arbitrary files via a .. in an HTTP request. OpenVAS entries also reference a related remote buffer overflow for Ip...

PT-2012-5939

Name of the Vulnerable Software and Affected Versions IpTools aka Tiny TCP/IP server version 0.1.4 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request, due to a directory traversal vulnerability in the WebServer Thttpd.bat. Recommendations For...

CVE-2012-3819: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

PT-2012-5021

Name of the Vulnerable Software and Affected Versions Dart PowerTCP WebServer for ActiveX versions 1.9 and earlier Description The issue is related to a stack consumption vulnerability in the dartwebserver.dll, which can be exploited by remote attackers to cause a denial of service. This is...

PowerTCP WebServer for - ActiveX Denial of Service

PowerTCP WebServer for - ActiveX Denial of Service source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to...

PowerTCP WebServer for - ActiveX Denial of Service

source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to legitimate users. PowerTCP WebServer for ActiveX 1.9....

Researcher Finds 100k IEEE.org Passwords Stored in Plain-Text on Public FTP Server

A Romanian computer scientist discovered that the Institute of Electrical and Electronics Engineers IEEE was storing its members’ usernames and passwords in plaint-text on a publically accessible file transfer protocol FTP server. Radu Drăgușin claims the collection of nearly 100,000 credentials...

HTTP Client Automatic Exploiter

This module has three actions. The first and the default is 'WebServer' which uses a combination of client-side and server-side techniques to fingerprint HTTP clients and then automatically exploit them. Next is 'DefangedDetection' which does only the fingerprinting part. Lastly, 'list' simply...

Apache Struts 2 - Skill Name Remote Code Execution

Apache Struts 2 - Skill Name Remote Code Execution source: https://www.securityfocus.com/bid/55165/info Apache Struts2 is prone to a remote-code-execution vulnerability because it fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary code in the...

Apache Struts 2 - Skill Name Remote Code Execution

source: https://www.securityfocus.com/bid/55165/info Apache Struts2 is prone to a remote-code-execution vulnerability because it fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary code in the context of the webserver process. This may...

Debian DSA-2532-1 : libapache2-mod-rpaf - denial of service

Sebastien Bocahu discovered that the reverse proxy add forward module for the Apache webserver is vulnerable to a denial of service attack through a single crafted request with many headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

DSA-2532-1 libapache2-mod-rpaf - denial of service

Bulletin has no description...

ABB AC500 PLC Webserver CoDeSys Vulnerability

Overview ICS-CERT has been notified of a buffer overflow vulnerability in the ABB AC500 PLC Webserver application. Successful exploitation of this vulnerability could lead to a denial of service DoS, affecting the availability of the service. This vulnerability is related to ICS-CERT Advisory,...

Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability

This host is running Cyclope Employee Surveillance Solution and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbcyclopeemployeesurveillancelfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability...

FileContral - Local File Inclusion Local File Disclosure

FileContral - Local File Inclusion Local File Disclosure source: https://www.securityfocus.com/bid/55891/info FileContral is prone to a local file-include and a local file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to...