| Title |
Multiple Vulnerabilities In Xedus Webserver
|
| Info |
Xedus is a Peer-to-Peer web server and provides you with the
ability to share files, music, and any other media, as well
as create robust and dynamic web sites, which can feature
database access, file system access, with full .net support.
Powered by a built in server-side, Microsoft C#, scripting
language; Xedus boasts the ability to create sites that can
rival web applications built on any other enterprise servers
like Apache, IIS, Iplanet… With Xedus, you will never need
to pay to host your sites again. Using the peer-to-peer mode,
other members of LIVE can access you site by keyword using
Internet Explorer even if you do not have a static IP address!
Xedus is prone to a number of vulnerabilities, which include
Denial Of Service, Cross Site Scripting, and Directory Traversal
attacks. These vulnerabilities can allow an attacker to retrieve
arbitrary files from the host machine, as well as deny legitimate
users access to the webserver. |
| Date |
August 30, 2021 |
| BID |
11071
|
| Credit |
James Bercegay |
| Title |
Keene Digital Media Server Directory Traversal
|
| Info |
Keene Digital Media Server is an easy and affordable way to
share all things digital with friends, family, and customers
over your broadband connection. DMS turns your computer into
a highly secure Web server that automatically converts your
files and folders into Web pages, thumbnails, and media shows
with no Web programming required. Integrated user and file
access security management provide the ultimate control over
your content. Keene Digital Media Server allows an attacker
to traverse out of the web directory, and retrieve arbitrary
files. |
| Date |
August 25, 2021 |
| BID |
11057
|
| Credit |
James Bercegay |
| Title |
Easy File Sharing Webserver v1.25 Vulnerabilities
|
| Info |
Easy File Sharing Web Server is a file sharing software
that allows visitors to upload/download files easily
through a Web Browser (IE,Netscape,Opera etc.). It can help
you share files with your friends and colleagues. They can
download files from your computer or upload files from
theirs. They will not be required to install this software
or any other software because an internet browser is enough.
Easy File Sharing Web Server also provides a Bulletin Board
System (Forum). The Easy File Sharing Web Server is vulnerable
to both Denial Of Service attacks, and unauthorized access to
the virtual folders used by the webserver. These vulnerabilities
could allow an attacker to crash/DoS the server, or gain read
access to arbitrary folders on the server.
|
| Date |
August 24, 2021 |
| BID |
11034
11036
|
| Credit |
James Bercegay |
| Title |
Possible Security Issues In LiveWorld Products
|
| Info |
LiveWorld provides collaborative services for online meetings,
customer care, and loyalty marketing. Supporting communication
between a company and its customers, employees, or partners
and among those people themselves - our services help corporations
cut costs, increase revenue, and solidify relationships
with groups critical to their success. The affected products
are beleived to be prone to Cross Site Scripting issues which allow
a malicious user to steal sensitive data, temporarily deface a page,
or render any malicious script in the context of the victim's browser.
The software believed to be vulnerable is LiveForum, LiveQ&A;, and
LiveFocusGroups. LiveWorld products are used on major websites
such as HBO, eBay, and others. |
| Date |
August 23, 2021 |
| BID |
Not Available
|
| Credit |
James Bercegay |
| Title |
BadBlue Web Server Denial of Service Vulnerability
|
| Info |
BadBlue lets you run a no-hassle Web site on your own PC for free,
including a domain name you can choose. Within seconds, you can
transform your PC into a friendly, file-sharing Web server with
all the power of a real server on the Internet. Remote users can
search for files, explore your shared folders, and run full-blown
applications created in HTML, PHP, Perl, and so on. This HTTP
server is vulnerable to a Denial of Service attack. This attack can
take place when a malicious user makes a certain number of connections
to the server. Included is proof of concept code. |
| Date |
August 20, 2021 |
| BID |
10983
|
| Credit |
James Bercegay |
|
