Unfixed XSS vulnerability at www.cafemontenegro.com

Security researcher Ravac, has submitted on 01/09/2009 a cross-site-scripting XSS vulnerability affecting www.cafemontenegro.com, which at the time of submission ranked 72550 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2012. It is...

alexnews-upload.txt

Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================= Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability ================================================================= Yellow Flood Organization Alex News-engin...

Alex News-Engine 1.5.1 - Arbitrary File Upload

Alex News-Engine 1.5.1 - Arbitrary File Upload Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Alex Article-Engine 1.3.0 fckeditor Arbitrary File Upload Vulnerability ========================================================================= Yellow Flood...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - 'FCKeditor' Arbitrary File Upload

Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover...

Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter -...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx //...

March Networks DVR 3204 - Logfile Information Disclosure

March Networks DVR 3204 - Logfile Information Disclosure !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server...

Remote file inclusion

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser PhFiTo 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRCPATH parameter to phfito-post...

CVE-2007-5157

CVE-2007-5157 concerns a PHP remote file inclusion vulnerability in the PHP Fidonet Tosser (PhFiTo) 1.3.0 running with phFidoNode. The flaw lies in phfito-post.php, where an attacker can supply a URL in the SRC_PATH parameter to phfito-post and cause arbitrary PHP code execution on the affected s...

Unfixed XSS vulnerability at www.heksen.bespreking.nl

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.heksen.bespreking.nl, which at the time of submission ranked 4049254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. ...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

myflash-rfi.txt

--------------------------------- Oyle Kahpe Ki Dünya ! -------------------------------------- Title : Wordpress plugin myflash = V1.00 wppath RFI Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct: [email protected]...

Unfixed XSS vulnerability at www.stardeveloper.com

Security researcher MaXWeL, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.stardeveloper.com, which at the time of submission ranked 93233 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

alexGuestbook.txt

======================================================================= ======================= @lex Guestbook =ModeliXe.php Remote File Inclusion Exploit ======================================================================= ======================== Bug in :ModeliXe.php Vlu Code :...