
RhinoSoft DNS4ME HTTP Server Vulnerabilities
|
September 16, 2021 |
DNS4Me is the dynamic DNS service that you need to
start hosting your own Internet services. When you have
a dynamic IP address, you need something to associate a
static domain name with it to make it easier for visitors
to access the services you provide. With DNS4Me, you can
take control of your Web site by running your own HTTP
server. Without a hosting company, you've eliminated the
cost of hosting as well as a layer of contact between you
and your Web site. This gives you unparalleled control
overits configuration, content, and delivery. But the
benefits of dynamic DNS aren't just for HTTP servers. Any
service that can make use of a domain name can benefit from
DNS4Me. This includes FTP servers, e-mail servers, daemons
for today's popular computer games, NetMeeting… With the
reliability and excellent support you've come to expect of
RhinoSoft.com backing up DNS4Me, you'll get a powerful, no
hassle dynamic DNS solution. The RhinoSoft DNS4ME HTTP server
is prone to multiple vulnerabilities, and users are encouraged
to upgrade as soon as possible.
|
Read This Article
|
Article Read 663 Times
|

Multiple Vulnerabilities In phpWebsite
|
August 31, 2021 |
phpWebSite provides a complete web site content management
solution. All client output is valid XHTML 1.0 and meets the
W3C's Web Accessibility Initiative requirements. Currently
features: announcement posting, form generator, user
management with granulated administration, calendar, poll,
faq, photoalbum, bulletin board, rss feeds, user
customizable theme support and more. It is one of the most
popular content managment systems in the world. However, it
is vulnerabile to a number of attacks, some of which allow an
attacker to completely take control of a vulnerable phpWebsite
installation. Other vulnerabilties in phpWebsite include script
injection, SQL injection, forced command execution, and cross
site scripting. A security update is available and all phpWebsite
users should upgrade their installation as soon as possible. |
Read This Article
|
Article Read 1772 Times
|

Multiple Vulnerabilities In Xedus Webserver
|
August 30, 2021 |
Xedus is a Peer-to-Peer web server and provides you with the
ability to share files, music, and any other media, as well
as create robust and dynamic web sites, which can feature
database access, file system access, with full .net support.
Powered by a built in server-side, Microsoft C#, scripting
language; Xedus boasts the ability to create sites that can
rival web applications built on any other enterprise servers
like Apache, IIS, Iplanet… With Xedus, you will never need
to pay to host your sites again. Using the peer-to-peer mode,
other members of LIVE can access you site by keyword using
Internet Explorer even if you do not have a static IP address!
Xedus is prone to a number of vulnerabilities, which include
Denial Of Service, Cross Site Scripting, and Directory Traversal
attacks. These vulnerabilities can allow an attacker to retrieve
arbitrary files from the host machine, as well as deny legitimate
users access to the webserver. |
Read This Article
|
Article Read 495 Times
|

Keene Digital Media Server Directory Traversal
|
August 25, 2021 |
Keene Digital Media Server is an easy and affordable way to
share all things digital with friends, family, and customers
over your broadband connection. DMS turns your computer into
a highly secure Web server that automatically converts your
files and folders into Web pages, thumbnails, and media shows
with no Web programming required. Integrated user and file
access security management provide the ultimate control over
your content. Keene Digital Media Server allows an attacker
to traverse out of the web directory, and retrieve arbitrary
files. |
Read This Article
|
Article Read 453 Times
|

Easy File Sharing Webserver v1.25 Vulnerabilities
|
August 24, 2021 |
Easy File Sharing Web Server is a file sharing software
that allows visitors to upload/download files easily
through a Web Browser (IE,Netscape,Opera etc.). It can help
you share files with your friends and colleagues. They can
download files from your computer or upload files from
theirs. They will not be required to install this software
or any other software because an internet browser is enough.
Easy File Sharing Web Server also provides a Bulletin Board
System (Forum). The Easy File Sharing Web Server is vulnerable
to both Denial Of Service attacks, and unauthorized access to
the virtual folders used by the webserver. These vulnerabilities
could allow an attacker to crash/DoS the server, or gain read
access to arbitrary folders on the server.
|
Read This Article
|
Article Read 918 Times
|

Possible Security Issues In LiveWorld Products
|
August 23, 2021 |
LiveWorld provides collaborative services for online meetings,
customer care, and loyalty marketing. Supporting communication
between a company and its customers, employees, or partners
and among those people themselves - our services help corporations
cut costs, increase revenue, and solidify relationships
with groups critical to their success. The affected products
are beleived to be prone to Cross Site Scripting issues which allow
a malicious user to steal sensitive data, temporarily deface a page,
or render any malicious script in the context of the victim's browser.
The software believed to be vulnerable is LiveForum, LiveQ&A;, and
LiveFocusGroups. LiveWorld products are used on major websites
such as HBO, eBay, and others. |
Read This Article
|
Article Read 575 Times
|

BadBlue Web Server Denial of Service Vulnerability
|
August 20, 2021 |
BadBlue lets you run a no-hassle Web site on your own PC for free,
including a domain name you can choose. Within seconds, you can
transform your PC into a friendly, file-sharing Web server with
all the power of a real server on the Internet. Remote users can
search for files, explore your shared folders, and run full-blown
applications created in HTML, PHP, Perl, and so on. This HTTP
server is vulnerable to a Denial of Service attack. This attack can
take place when a malicious user makes a certain number of connections
to the server. Included is proof of concept code. |
Read This Article
|
Article Read 349 Times
|

SubScan 1.3 DNS Enumeration Utility Released
|
August 18, 2021 |
After a way too long awaited release SubScan 1.3 is here.
It is a beta copy, but works. I call it a beta because
right now it is only for the Windows OS. I plan changing
this in the very near future, but until then the source is
available if you want to make it better. Some of the new
features in SubScan 1.3 are netblock scans, deep scan, and
a wildcard DNS option that helps ignore duplicate records.
The deep scan is my favorite feature of the new release,
and allows for the enumaration of up to one hundred times
more DNS records than in SubScan 1.2. If you have any
questions about this release you can get them answered on
our forums. Please read the README file before asking any
questions though |
Read This Article
|
Article Read 740 Times
|

Invision Power Board IP Spoofing Vulnerability
|
June 16, 2022 |
Invision Power Board (IPB) is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of object oriented code, highly-optimized SQL queries, and the fast PHP engine. A comprehensive administration control panel is included to help you keep your board running smoothly. Moderators will also enjoy the full range of options available to them via built-in tools and moderators control panel. Members will appreciate the ability to subscribe to topics, send private messages, and perform a host of other options through the user control panel. It is used by millions of people over the world. There lies a vulnerability in all version of Invision Power Board that allow a user to spoof his/her IP address by creating a bogus X_FORWARDED_FOR HTTP Header entry. This condition can also be caused by a user unknowingly if they use a proxy to access the internet. For example, private LAN based IP's will be logged which are impossible to trace.
|
Read This Article
|
Article Read 681 Times
|

Multiple Vulnerabilities In PHPX 3.26 And Earlier
|
May 04, 2022 |
PHPX is a constantly evolving and changing Content Management System (CMS). PHPX is highly customizable and high powered all in one system. PHPX provides content management combined with the power of a portal by including in the core package modules such as FAQ, polls, and forums. PHPX uses dynamic-template-design, what this means is that you have the power to control what your site will look like. Themes are included, but not required. You can create the page however you want, and PHPX will just insert code where you want it. No more 3 columns if you don’t want it! Written in the powerful server language, PHP, and utilizing the amazingly fast and secure database MySQL, PHPX is a great solution for all size website communities, at the best price possible…free! Vulnerabilities are present in version(s) 3.2.6 and earlier and present themselves in the form of cross site scripting, path disclosure, and arbitrary command execution. Users are advised to upgrade immeadiately. |
Read This Article
|
Article Read 297 Times
|

Results 46 - 10 of 10
|
Results per-page: 5 | 10 | 20 | 50
|
|