110 matches found
EUVD-2009-4622
Malware in sbrugna...
EUVD-2005-4767
Malware in sbrugna...
EUVD-2009-3542
Malware in sbrugna...
EUVD-2009-3526
Malware in sbrugna...
EUVD-2009-3543
Malware in sbrugna...
EUVD-2002-0444
Malware in sbrugna...
EUVD-2002-0445
Malware in sbrugna...
EUVD-2009-4623
Malware in sbrugna...
EUVD-2009-4057
Malware in sbrugna...
Xerver 4.17 - Forced Directory Listing
No description provided by source. source: http://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose t...
Xerver 2.10 Multiple Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It has been reported that sending a...
Xerver HTTP Server 4.32 - XSS / Directory Traversal Vulnerability
No description provided by source. Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory¤tPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory¤tPath=c:\ XSS Exploit :...
Xerver 4.32 - Source Disclosure and HTTP Authentication Bypass
No description provided by source. Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file is derived from part of the...
Xerver 4.31, 4.32 HTTP Response Splitting
No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...
Xerver 4.17 Server URI Null Character XSS
No description provided by source. source: http://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose t...
Xerver HTTP Server <= 4.32 - Remote Denial of Service
No description provided by source. Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver...
Xerver 4.17 Single Dot File Request Source Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose t...
Xerver HTTP CRLF Injection Response Splitting (CVE-2009-4086)
This is a CRLF injection vulnerability in Xerver HTTP Server. Remote attackers could use this vulnerability to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL...
Xerver Double Slash Authentication Bypass
The version of Xerver installed on the remote host is affected by an authentication bypass vulnerability. It is possible to access protected web directories without authentication by prepending the directory with an extra '/' character, as long as the directory is not recursively protected. A...
Xerver 4.32 Source Disclosure / HTTP Auth Bypass
Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file is derived from part of the Metasploit Framework and may be subject t...