jetlib.sec » Tags » mod

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

177 items tagged "mod"

Related tags: proxy module [+], buffer overflow vulnerability [+], proof of concept [+], apache [+], integer overflow [+], sftp [+], information disclosure [+], hacks [+], sql [+], mandriva linux [+], exploits [+], based buffer overflow [+], auth [+], proxy [+], txt [+], server [+], phpcoin [+], day [+], vulnerability [+], winamp [+], wildcard characters [+], usa [+], uri [+], unencrypted [+], ubuntu [+], tmp [+], tar gz [+], stefano nichele [+], stack overflow [+], stack buffer [+], ssl [+], session management [+], session ids [+], rpsa [+], resource exhaustion [+], psldap [+], plugin [+], pcre [+], openid [+], negotiation [+], ldap [+], integer overflow vulnerability [+], information disclosure vulnerability [+], httpd [+], http [+], external exposure [+], directory listing [+], cluster [+], bandwidth consumption [+], apache httpd server [+], apache 2 [+], ampjuke [+], denial of service [+], service vulnerability [+], web server apache [+], web [+], status [+], sql injection [+], sensitive response [+], remote [+], punbb [+], php [+], parameter [+], other search engines [+], neil daswani [+], mod perl [+], mdvsa [+], malware [+], kinect [+], hackers [+], fcgid [+], dangling pointer [+], cross site scripting [+], copycat [+], bugtraq [+], battles [+], apache status [+], apache http server [+], security [+], zenith [+], x.org [+], x server [+], wrong way [+], world physics [+], way [+], warns [+], vulnerabilities [+], user [+], underling [+], uk members [+], timeout [+], time on his hands [+], surveys [+], superpad [+], solar panels [+], software engineer [+], shadow race [+], server mod [+], security advisory [+], safer use [+], robots [+], risk [+], render [+], remote buffer overflow vulnerability [+], remote buffer overflow [+], redpower [+], randy [+], push [+], portal [+], poc [+], pneumatic tubes [+], phpbb mod [+], phpbb [+], php nuke [+], penetration [+], overflow [+], oracle [+], only [+], nokia [+], nimbus [+], negative content [+], n64 [+], mysql [+], misc [+], minecraft [+], megaphone [+], maximum size [+], map [+], losses [+], kenny [+], joomla [+], john [+], invitation [+], interim response [+], industrial technology [+], inclusion [+], imap [+], imagemap [+], httpd web server [+], heap [+], handhelds [+], hack [+], google [+], glsa [+], garry [+], fun [+], ftpd [+], fact [+], external mic [+], extension [+], dulcet tones [+], django [+], default debian [+], data [+], cyber attack [+], cross site [+], content length [+], confidential data [+], confidential [+], competition [+], combination [+], code [+], cms [+], classic [+], charset [+], character encoding [+], cellphones [+], case [+], calendar [+], c undefined [+], bullhorn [+], buffer overflow [+], bristlebot [+], bod [+], autoindex [+], authnz [+], attempts [+], apache httpd [+], angry crowds [+], proxy ftp [+], null pointer [+], security constraints [+], red hat security [+], dav [+], worker [+], isapi [+], subversion [+], memory corruption [+], request body [+], proftpd [+]

• May 23, 2012
• 7:22

  Mod_Auth_OpenID Session Stealing

   » ‎ Packet Storm Security Exploits
  mod_auth_openid versions prior to 0.7 insecurely store session ids in /tmp/mod_auth_openid.db unencrypted.

  Tags:  openid auth mod session-ids unencrypted tmp  

• 7:22

  Mod_Auth_OpenID Session Stealing

   » ‎ Packet Storm Security Recent Files
  mod_auth_openid versions prior to 0.7 insecurely store session ids in /tmp/mod_auth_openid.db unencrypted.

  Tags:  openid auth mod session-ids unencrypted tmp  

• 7:22

  Mod_Auth_OpenID Session Stealing

   » ‎ Packet Storm Security Misc. Files
  mod_auth_openid versions prior to 0.7 insecurely store session ids in /tmp/mod_auth_openid.db unencrypted.

  Tags:  openid auth mod session-ids unencrypted tmp  

• May 20, 2012
• 9:01

  Building a 6502 in Minecraft

   » ‎ Hack a Day
  We’ll admit that we haven’t been following Minecraft like we used to; its been a while since we’ve seen something amazing in Minecraft, but [eloraam]‘s 6502 emulator (part of her RedPower Minecraft mod) takes the cake. The RedPower mod adds a lot of industrial technology to Minecraft. Pumps, solar panels, and pneumatic tubes to move [...]

  Tags:  redpower mod minecraft pneumatic-tubes industrial-technology solar-panels classic hacks  

• May 18, 2012
• 0:00

  Vuln: Oracle mod_wl HTTP POST Request Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Oracle mod_wl HTTP POST Request Remote Buffer Overflow Vulnerability

  Tags:  oracle mod http buffer-overflow-vulnerability remote-buffer-overflow-vulnerability remote-buffer-overflow  

• April 22, 2012
• 14:00

  [webapps / 0day] - mod_security 2.6.5 for Apache 2.2.x & 2.4.1 Released

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - mod_security 2.6.5 for Apache 2.2.x & 2.4.1 Released

  Tags:  security day mod apache-2  

• 14:00

  [webapps / 0day] - mod_security 2.6.5 for Apache 2.2.x & 2.4.1 Released SQL injection bypass

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - mod_security 2.6.5 for Apache 2.2.x & 2.4.1 Released SQL injection bypass

  Tags:  security day mod apache-2  

• April 03, 2012
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• February 02, 2012
• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• January 18, 2012
• 15:29

  Red Hat Security Advisory 2012-0040-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0040-01 - Part of the Native components for JBoss Enterprise Web Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:29

  Red Hat Security Advisory 2012-0040-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0040-01 - Part of the Native components for JBoss Enterprise Web Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:29

  Red Hat Security Advisory 2012-0040-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0040-01 - Part of the Native components for JBoss Enterprise Web Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:29

  Red Hat Security Advisory 2012-0039-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0039-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:29

  Red Hat Security Advisory 2012-0039-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0039-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:29

  Red Hat Security Advisory 2012-0039-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0039-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:28

  Red Hat Security Advisory 2012-0038-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0038-01 - Part of the Native components for JBoss Enterprise Application Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:28

  Red Hat Security Advisory 2012-0038-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0038-01 - Part of the Native components for JBoss Enterprise Application Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:28

  Red Hat Security Advisory 2012-0038-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0038-01 - Part of the Native components for JBoss Enterprise Application Platform is mod_cluster, an Apache HTTP Server based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints apache-http-server red-hat-security  

• 15:28

  Red Hat Security Advisory 2012-0037-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0037-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:28

  Red Hat Security Advisory 2012-0037-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0037-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:28

  Red Hat Security Advisory 2012-0037-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0037-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0036-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0036-01 - The mod_cluster native component provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  cluster mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0036-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0036-01 - The mod_cluster native component provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  cluster mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0036-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0036-01 - The mod_cluster native component provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  cluster mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0035-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0035-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0035-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0035-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• 15:27

  Red Hat Security Advisory 2012-0035-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0035-01 - mod_cluster-native provides a native build of mod_cluster for the Apache HTTP Server. mod_cluster is an httpd-based load balancer. Like mod_jk, it uses a communication channel to forward requests from httpd to an application server node. It was found that mod_cluster allowed worker nodes to register on any virtual host, regardless of the security constraints applied to other vhosts. In a typical environment, there will be one vhost configured internally for worker nodes, and another configured externally for serving content. A remote attacker could use this flaw to register an attacker-controlled worker node via an external vhost that is not configured to apply security constraints, then use that worker node to serve malicious content, intercept credentials, and hijack user sessions.

  Tags:  worker mod security security-constraints red-hat-security apache-http-server  

• November 10, 2011
• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 8:01

  Bullhorn mod lets you disperse angry crowds to the dulcet tones of [Kenny G]

   » ‎ Hack a Day
  [Randy] had a cheap megaphone, and like most models in this price range, it didn’t have an audio input jack on board. He wanted the ability to pipe both music and audio from an external mic through the megaphone, and in a brief tutorial, he shows how he modified his bullhorn to do just that. [...]

  Tags:  megaphone mod bullhorn randy kenny angry-crowds external-mic dulcet-tones misc hacks  

• October 28, 2011
• 21:00

  [webapps / 0day] - Joomla mod_adsebse modules SQL Injection Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Joomla mod_adsebse modules SQL Injection Vulnerability

  Tags:  day mod joomla vulnerability  

• October 26, 2011
• 13:07

  Bugtraq: [ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection

   » ‎ SecurityFocus Vulnerabilities
  [ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection

  Tags:  mod glsa apache sql-injection  

• October 25, 2011
• 0:00

  Vuln: Apache 'mod_authnz_external' Module SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_authnz_external' Module SQL Injection Vulnerability

  Tags:  mod apache authnz vulnerability  

• October 20, 2011
• 16:39

  Apache mod_rewrite Vulnerability PoC

   » ‎ SecuriTeam

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  vulnerability mod apache safer-use penetration  

• October 10, 2011
• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Exploits
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Recent Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Misc. Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 14:00

  [remote exploits] - Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

  Tags:  mod proxy apache exploits vulnerability  

• October 06, 2011
• 9:00

  Bugtraq: Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability

  Tags:  cross-site mod cms vulnerability  

• October 05, 2011
• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Advisories
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Recent Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Misc. Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• September 29, 2011
• 16:38

  AmpJuke 0.8.5 Apache mod_negotiation Filename Bruteforce

   » ‎ Packet Storm Security Advisories
  AmpJuke version 0.8.5 with Apache mod_negotiation suffers from a directory listing vulnerability.

  Tags:  ampjuke mod apache negotiation vulnerability directory-listing  

• 16:38

  AmpJuke 0.8.5 Apache mod_negotiation Filename Bruteforce

   » ‎ Packet Storm Security Recent Files
  AmpJuke version 0.8.5 with Apache mod_negotiation suffers from a directory listing vulnerability.

  Tags:  ampjuke mod apache negotiation vulnerability directory-listing  

• 16:38

  AmpJuke 0.8.5 Apache mod_negotiation Filename Bruteforce

   » ‎ Packet Storm Security Misc. Files
  AmpJuke version 0.8.5 with Apache mod_negotiation suffers from a directory listing vulnerability.

  Tags:  ampjuke mod apache negotiation vulnerability directory-listing  

• September 22, 2011
• 0:00

  Vuln: Apache 'mod_deflate' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_deflate' Remote Denial Of Service Vulnerability

  Tags:  mod remote apache service-vulnerability denial-of-service  

• September 14, 2011
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• September 12, 2011
• 21:00

  [remote exploits] - Mod_FTPD Stack Buffer Overflow Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Mod_FTPD Stack Buffer Overflow Exploit

  Tags:  ftpd exploits mod stack-buffer buffer-overflow  

• September 08, 2011
• 10:41

  [Paper] mod_antimalware: a novel apache module for containing web-based malware infections

   » ‎ SecDocs
  Authors: Neil Daswani
  Tags: malware web server Apache
  Event: Black Hat USA 2010
  Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.

  Tags:  malware web mod neil-daswani usa web-server-apache other-search-engines  

• 10:41

  [Slides] mod_antimalware: a novel apache module for containing web-based malware infections

   » ‎ SecDocs
  Authors: Neil Daswani
  Tags: malware web server Apache
  Event: Black Hat USA 2010
  Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.

  Tags:  malware web mod neil-daswani usa web-server-apache other-search-engines  

• September 05, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• August 10, 2011
• 0:00

  Vuln: Apache 'mod_fcgid' Module Unspecified Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_fcgid' Module Unspecified Stack Buffer Overflow Vulnerability

  Tags:  mod fcgid apache buffer-overflow-vulnerability stack-buffer  

• July 15, 2011
• 0:00

  Vuln: Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow Vulnerability

  Tags:  mod proxy apache buffer-overflow-vulnerability negative-content content-length  

• June 24, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• June 23, 2011
• 0:00

  Vuln: Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability  

• June 13, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• June 08, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• June 06, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities

  Tags:  dav subversion mod information-disclosure denial-of-service  

• June 04, 2011
• 9:01

  Mandriva Linux Security Advisory 2011-106

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-106 - The mod_dav_svn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may in certain scenarios enter a logic loop which does not exit and which allocates emory in each iteration, ultimately exhausting all the available emory on the server which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users.

  Tags:  dav server mod apache-httpd-server mandriva-linux null-pointer  

• 9:01

  Mandriva Linux Security Advisory 2011-106

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-106 - The mod_dav_svn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may in certain scenarios enter a logic loop which does not exit and which allocates emory in each iteration, ultimately exhausting all the available emory on the server which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users.

  Tags:  dav server mod apache-httpd-server mandriva-linux null-pointer  

• 9:01

  Mandriva Linux Security Advisory 2011-106

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-106 - The mod_dav_svn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may in certain scenarios enter a logic loop which does not exit and which allocates emory in each iteration, ultimately exhausting all the available emory on the server which can lead to a denial of service. The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users.

  Tags:  dav server mod apache-httpd-server mandriva-linux null-pointer  

• April 18, 2011
• 0:00

  Vuln: ProFTPD 'mod_sftp' Module Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sftp' Module Integer Overflow Vulnerability

  Tags:  sftp mod proftpd integer-overflow-vulnerability  

• April 11, 2011
• 14:00

  Bugtraq: rPSA-2011-0014-1 httpd mod_ssl

   » ‎ SecurityFocus Vulnerabilities
  rPSA-2011-0014-1 httpd mod_ssl

  Tags:  ssl mod httpd rpsa  

• April 06, 2011
• 14:00

  [webapps / 0day] - PHP-Nuke 8.0 (mod Surveys) SQL Injection Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - PHP-Nuke 8.0 (mod Surveys) SQL Injection Vulnerability

  Tags:  day php-nuke mod vulnerability surveys  

• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• April 05, 2011
• 0:00

  Vuln: ProFTPD 'mod_sftp' Module Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sftp' Module Integer Overflow Vulnerability

  Tags:  sftp mod proftpd integer-overflow-vulnerability  

• March 28, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• March 16, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• March 14, 2011
• 0:00

  Vuln: ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

  Tags:  mod proftpd sql buffer-overflow-vulnerability based-buffer-overflow  

• March 13, 2011
• 7:25

  Bristlebot mod never rubs you the wrong way

   » ‎ Hack a Day
  [Underling] sent in his bristlebot project that aims to put a new spin on controlling bristlebot movement. We have seen several attempts at bristlebot directional control in the past, but none of these methods really fit what he wanted to do. His goal was to use a single brush rather than two, and be able [...]

  Tags:  way mod bristlebot underling wrong-way attempts robots hacks  

• March 11, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• March 10, 2011
• 13:20

  Kinect hacked to work with Garry’s Mod means endless hours of virtual fun

   » ‎ Hack a Day
  [John B] is a software engineer and had some spare time on his hands, so he started messing around with his Kinect which had been sitting unused for awhile. He wanted to see what he could create if he was able to get Kinect data into a virtual environment that supported real-world physics. The first [...]

  Tags:  fun kinect mod john garry world-physics software-engineer time-on-his-hands kinect hacks  

• March 08, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• March 04, 2011
• 0:00

  Vuln: Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Subversion 'mod_dav_svn' Apache Server NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  dav subversion mod service-vulnerability null-pointer denial-of-service  

• February 08, 2011
• 0:00

  Vuln: ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

  Tags:  mod proftpd sql buffer-overflow-vulnerability based-buffer-overflow  

• February 07, 2011
• 14:00

  [dos / poc] - ProFTPD mod_sftp Integer Overflow DoS PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - ProFTPD mod_sftp Integer Overflow DoS PoC

  Tags:  poc mod proftpd integer-overflow sftp  

• 9:22

  ProFTPD mod_sftp Integer Overflow

   » ‎ Packet Storm Security Exploits
  ProFTPD mod_sftp integer overflow denial of service proof of concept exploit.

  Tags:  sftp mod proftpd integer-overflow proof-of-concept denial-of-service  

• 9:22

  ProFTPD mod_sftp Integer Overflow

   » ‎ Packet Storm Security Recent Files
  ProFTPD mod_sftp integer overflow denial of service proof of concept exploit.

  Tags:  sftp mod proftpd integer-overflow proof-of-concept denial-of-service  

• 9:22

  ProFTPD mod_sftp Integer Overflow

   » ‎ Packet Storm Security Misc. Files
  ProFTPD mod_sftp integer overflow denial of service proof of concept exploit.

  Tags:  sftp mod proftpd integer-overflow proof-of-concept denial-of-service  

• January 28, 2011
• 0:00

  Vuln: ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

  Tags:  mod proftpd sql buffer-overflow-vulnerability based-buffer-overflow  

• January 08, 2011
• 14:00

  [local exploits] - Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

  Tags:  plugin mod winamp stack-overflow exploits  

• January 06, 2011
• 0:00

  Vuln: Apache 'mod_fcgid' Module Unspecified Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_fcgid' Module Unspecified Stack Buffer Overflow Vulnerability

  Tags:  mod fcgid apache buffer-overflow-vulnerability stack-buffer  

• December 24, 2010
• 0:00

  Vuln: ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

  Tags:  mod proftpd sql buffer-overflow-vulnerability based-buffer-overflow  

• December 21, 2010
• 9:50

  Apache Insecure mod_rewrite PCRE Resource Exhaustion

   » ‎ Packet Storm Security Advisories
  Apache suffers from an insecure mod_rewrite PCRE resource exhaustion vulnerability.

  Tags:  mod pcre apache resource-exhaustion vulnerability  

• 9:50

  Apache Insecure mod_rewrite PCRE Resource Exhaustion

   » ‎ Packet Storm Security Recent Files
  Apache suffers from an insecure mod_rewrite PCRE resource exhaustion vulnerability.

  Tags:  mod pcre apache resource-exhaustion vulnerability  

• 9:50

  Apache Insecure mod_rewrite PCRE Resource Exhaustion

   » ‎ Packet Storm Security Misc. Files
  Apache suffers from an insecure mod_rewrite PCRE resource exhaustion vulnerability.

  Tags:  mod pcre apache resource-exhaustion vulnerability  

• 0:00

  Vuln: 'mod_auth_mysql' Package Multibyte Character Encoding SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  'mod_auth_mysql' Package Multibyte Character Encoding SQL Injection Vulnerability

  Tags:  mysql auth mod character-encoding vulnerability  

• December 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• December 09, 2010
• 0:00

  Vuln: Apache 'mod_proxy' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy' Remote Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service  

• November 18, 2010
• 0:00

  Vuln: ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ProFTPD 'mod_sql' Remote Heap Based Buffer Overflow Vulnerability

  Tags:  mod proftpd sql buffer-overflow-vulnerability based-buffer-overflow  

• November 12, 2010
• 13:04

  MoD Battles Copycat Hackers

   » ‎ Packet Storm Security Headlines
  MoD Battles Copycat Hackers

  Tags:  battles copycat mod hackers  

• 0:00

  MoD Battles Copycat Hackers

   » ‎ Packet Storm Security Headlines
  MoD Battles Copycat Hackers

  Tags:  battles copycat mod hackers  

• November 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• October 28, 2010
• 0:00

  Vuln: Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability  

• October 25, 2010
• 14:00

  [local exploits] - Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

  Tags:  plugin mod winamp stack-overflow exploits  

• October 20, 2010
• 14:00

  [local exploits] - Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit

  Tags:  plugin mod winamp stack-overflow exploits  

• October 18, 2010
• 7:00

  Bugtraq: rPSA-2010-0060-1 httpd mod_ssl

   » ‎ SecurityFocus Vulnerabilities
  rPSA-2010-0060-1 httpd mod_ssl

  Tags:  ssl mod httpd rpsa  

• 0:00

  Vuln: Apache 'mod_proxy' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy' Remote Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service  

• September 24, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• September 14, 2010
• 8:00

  Bugtraq: rPSA-2010-0056-1 httpd mod_ssl

   » ‎ SecurityFocus Vulnerabilities
  rPSA-2010-0056-1 httpd mod_ssl

  Tags:  ssl mod httpd rpsa  

• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• September 09, 2010
• 11:35

  Visitors Google Map Lite 1.0.1 mod_visitorsgooglemap SQL Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Visitors Google Map Lite 1.0.1 mod_visitorsgooglemap SQL Injection

  Tags:  google mod map sql-injection  

• September 03, 2010
• 0:00

  Vuln: Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability timeout  

• August 31, 2010
• 8:00

  Bugtraq: django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload

   » ‎ SecurityFocus Vulnerabilities
  django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload

  Tags:  combination django mod default-debian bugtraq maximum-size  

• August 16, 2010
• 22:02

  MDVSA-2010-152.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-152 - The mod_cache and mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service via a request that lacks a path.

  Tags:  txt mdvsa mod mandriva-linux apache-http-server denial-of-service  

• 22:02

  MDVSA-2010-153.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-153 - The mod_cache and mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service via a request that lacks a path. mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.

  Tags:  mod http apache apache-http-server sensitive-response denial-of-service  

• 22:01

  MDVSA-2010-152.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-152 - The mod_cache and mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service via a request that lacks a path.

  Tags:  txt mdvsa mod mandriva-linux apache-http-server denial-of-service  

• 22:01

  MDVSA-2010-153.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-153 - The mod_cache and mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service via a request that lacks a path. mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.

  Tags:  mod http apache apache-http-server sensitive-response denial-of-service  

• August 12, 2010
• 0:00

  MoD Bod Warns Of Cyber Attack Risk

   » ‎ Packet Storm Security Headlines
  MoD Bod Warns Of Cyber Attack Risk

  Tags:  warns bod mod cyber-attack risk  

• August 05, 2010
• 0:00

  Vuln: Apache Mod_AutoIndex.C Undefined Charset Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache Mod_AutoIndex.C Undefined Charset Cross-Site Scripting Vulnerability

  Tags:  autoindex mod apache c-undefined vulnerability  

• 0:00

  Vuln: Apache 'mod_deflate' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_deflate' Remote Denial Of Service Vulnerability

  Tags:  mod remote apache service-vulnerability denial-of-service  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• July 30, 2010
• 1:00

  PunBB Mod User_Diaries

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PunBB Mod User_Diaries

  Tags:  punbb mod user  

• July 22, 2010
• 1:00

  PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability

  Tags:  only mod phpbb-mod vulnerability invitation  

• July 01, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• June 09, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• June 03, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• May 28, 2010
• 0:00

  Vuln: Apache mod_auth_shadow Race Condition Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_auth_shadow Race Condition Security Bypass Vulnerability

  Tags:  auth mod apache shadow-race vulnerability  

• May 26, 2010
• 0:00

  Vuln: Apache mod_imagemap and mod_imap Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_imagemap and mod_imap Cross-Site Scripting Vulnerability

  Tags:  imagemap mod apache imap vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp charset vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_balancer' Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_balancer' Multiple Vulnerabilities

  Tags:  proxy mod apache vulnerabilities  

• May 22, 2010
• 1:00

  PunBB Calendar Mod

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PunBB Calendar Mod

  Tags:  punbb calendar mod  

• May 19, 2010
• 0:00

  Vuln: X.Org X Server RENDER Extension 'mod()' Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  X.Org X Server RENDER Extension 'mod()' Remote Memory Corruption Vulnerability

  Tags:  mod extension render x.org x-server memory-corruption vulnerability  

• May 11, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability interim-response denial-of-service  

• May 08, 2010
• 11:51

  Nimbus, portable N64

   » ‎ Hack a Day
  We love a beautiful and successful N64 portable mod, (In case that fact wasn’t already obvious). And today we would like to add [cndowning's] Nimbus N64 to our list of favorites. The base is made from vacuum formed plastic while the buttons come from a modified superpad and the screen is a Zenith 5inch. We [...]

  Tags:  case mod fact nimbus superpad zenith n64 handhelds hacks  

• May 04, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• April 26, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 23, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• April 21, 2010
• 9:00

  mod_psldap-0.93.tar.gz

   » ‎ Packet Storm Security Tools
  mod_psldap is an Apache module that performs authentication and authorization against an LDAP server with LDAP based session management. It also provides Web 2.0 based capabilities to add, edit, move, and create new records in the LDAP store, leveraging XSL stylesheets to offload heavy processing to the clients and reduce bandwidth consumption by up to 95% or more.

  Tags:  mod ldap psldap bandwidth-consumption tar-gz session-management  

• 9:00

  mod_psldap-0.93.tar.gz

   » ‎ Packet Storm Security Recent Files
  mod_psldap is an Apache module that performs authentication and authorization against an LDAP server with LDAP based session management. It also provides Web 2.0 based capabilities to add, edit, move, and create new records in the LDAP store, leveraging XSL stylesheets to offload heavy processing to the clients and reduce bandwidth consumption by up to 95% or more.

  Tags:  mod ldap psldap bandwidth-consumption tar-gz session-management  

• 1:00

  phpBB2 Portal Mod XSS Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  phpBB2 Portal Mod XSS Vulnerability

  Tags:  portal phpbb mod vulnerability  

• April 19, 2010
• 14:00

  dsa-2035-1.txt

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2035-1 - Two issues have been found in the Apache HTTPD web server. mod_proxy_ajp would return the wrong status code if it encountered an error, causing a backend server to be put into an error state until the retry timeout expired. A remote attacker could send malicious requests to trigger this issue, resulting in denial of service. A flaw in the core subrequest process code was found, which could lead to a daemon crash (segfault) or disclosure of sensitive information if the headers of a subrequest were modified by modules such as mod_headers.

  Tags:  code server mod httpd-web-server apache-httpd server-mod  

• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 13, 2010
• 0:00

  MoD Reports Hundreds Of Confidential Data Losses

   » ‎ Packet Storm Security Headlines
  MoD Reports Hundreds Of Confidential Data Losses

  Tags:  confidential data mod confidential-data losses  

• April 05, 2010
• 19:52

  mod_psldap-0.92.tar.gz

   » ‎ Packet Storm Security Tools
  mod_psldap is an Apache module that performs authentication and authorization against an LDAP server with LDAP based session management. It also provides Web 2.0 based capabilities to add, edit, move, and create new records in the LDAP store, leveraging XSL stylesheets to offload heavy processing to the clients and reduce bandwidth consumption by up to 95% or more.

  Tags:  mod ldap psldap bandwidth-consumption tar-gz session-management  

• March 31, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• March 29, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• March 26, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• March 25, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• March 19, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• March 16, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• March 12, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• March 11, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• March 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• March 09, 2010
• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability

  Tags:  mod status apache apache-status mod-perl cross-site-scripting  

• March 08, 2010
• 10:00

  Bugtraq: Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002

  Tags:  isapi mod apache dangling-pointer bugtraq security-advisory  

• 0:00

  Vuln: Apache 'mod_isapi' Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_isapi' Memory Corruption Vulnerability

  Tags:  isapi mod apache memory-corruption vulnerability  

• 0:00

  Vuln: phpCOIN 'mod' Parameter Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpCOIN 'mod' Parameter Local File Include Vulnerability

  Tags:  parameter phpcoin mod vulnerability  

• March 06, 2010
• 16:00

  phpCOIN 1.2.1 (mod.php) Local File Inclusion Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  phpCOIN 1.2.1 (mod.php) Local File Inclusion Vulnerability

  Tags:  phpcoin php mod vulnerability inclusion  

• 11:00

  Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

  Tags:  isapi mod apache dangling-pointer apache-2  

• 0:00

  Vuln: phpCOIN 'mod' Parameter Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpCOIN 'mod' Parameter Local File Include Vulnerability

  Tags:  parameter phpcoin mod vulnerability  

• March 01, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• February 26, 2010
• 0:00

  Vuln: Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability

  Tags:  mod status apache apache-status mod-perl cross-site-scripting  

• February 24, 2010
• 11:00

  phpCOIN v1.2.1 (mod.php) SQL Injection Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  phpCOIN v1.2.1 (mod.php) SQL Injection Vulnerability

  Tags:  phpcoin php mod vulnerability  

• February 08, 2010
• 5:54

  ‘Mod in the USA’ N900 PUSH competition

   » ‎ Hack a Day
  Just when you think you’ve heard all you can about the N900 PUSH competition, we have some more news for you. The original PUSH competition was only for UK members, but now Nokia has introduced the ‘Mod in the USA‘ N900 PUSH competition. Similar to the original, anyone (within region) can submit a cool mod, hack, [...]

  Tags:  competition push mod usa uk-members hack nokia cellphones hacks  

• January 28, 2010
• 0:00

  Vuln: Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

  Tags:  proxy mod apache integer-overflow-vulnerability  

• January 27, 2010
• 12:00

  modproxy-overflow.txt

   » ‎ Packet Storm Security Recent Files
  Mod_proxy from Apache 1.3 suffers from an integer overflow. Full details and proof of concept provided.

  Tags:  txt proxy mod integer-overflow proof-of-concept  

• 12:00

  modproxy-overflow.txt

   » ‎ Packet Storm Security Exploits
  Mod_proxy from Apache 1.3 suffers from an integer overflow. Full details and proof of concept provided.

  Tags:  txt proxy mod integer-overflow proof-of-concept  

• 9:33

  Bugtraq: Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

   » ‎ SecurityFocus Vulnerabilities
  Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

  Tags:  proxy overflow mod integer-overflow heap  

• January 25, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability