joe testa vulnerabilities and exploits

(subscribe to this query)

Joe Testa hellbent 01 webserver allows malicious users to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.

Joe Testa Hellbent 0.1

Joe Testa hellbent 01 allows remote malicious users to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the paren...

Joetesta Hellbent 0.1

Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote malicious users to read arbitrary files via a ... (triple dot) in the filename parameter.

Apple Darwin Streaming Server 4.1.2 Apple Quicktime Streaming Server 4.1.1

1 EDB exploit

statsconfig.pl in OmniHTTPd 2.07 allows remote malicious users to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Omnicron Omnihttpd 2.0.7

1 EDB exploit

statsconfig.pl in OmniHTTPd 2.07 allows remote malicious users to overwrite arbitrary files via the cgidir parameter.

Omnicron Omnihttpd 2.0.7

1 EDB exploit

Buffer overflow in AOL Instant Messenger prior to 4.3.2229 allows remote malicious users to execute arbitrary commands via a long "goim" command.

Aol Instant Messenger 3.5.1808 Aol Instant Messenger 3.5.1856 Aol Instant Messenger 2.0 N Aol Instant Messenger 2.5.1366 Aol Instant Messenger 2.5.1598 Aol Instant Messenger 4.0 Aol Instant Messenger 4.1.2010 Aol Instant Messenger 3.0.1470 Aol Instant Messenger 3.0 N Aol Instant Messenger 4.2.1193 Aol Instant Messenger 3.5.1635 Aol Instant Messenger 3.5.1670

1 EDB exploit

Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote malicious users to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.

Guido Frassetto Sedum 2.0

1 EDB exploit

HSWeb 2.0 HTTP server allows remote malicious users to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.

Heat-on Software Hsweb 2.0

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook