CVE-2018-10467

CVE-2018-10467 Cronología 2018-04-06: Descubierto 2018-04-13: Reprueba en entorno de staging 2018-04-16: Comunicación interna 2018-04-27: Notificación al proveedor 2018-04-27: Retroalimentación del proveedor 2018-05-27: Aclaraciones técnicas del producto 2018-05-03: Instrucciones añadidas del...

CVE-2018-10715

CVE-2018-10715 Timeline 2018-04-06: Discovered 2018-04-13: Retest staging environment 2018-04-16: Internal communication 2018-05-03: Vendor notification 2018-05-03: Vendor feedback 2018-05-XX: Technical clarifications of the product 2018-05-XX: Added instructions to fix the issue from the vendor...

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 Cronología ================ 2018-06-08: Descubierto 2018-06-11: Reprobar entorno de staging 2018-06-12: Reprobar entorno en vivo 2018-06-19: Comunicación interna 2018-06-21: Notificación al proveedor 2018-06-XX: Comentarios del proveedor 2018-06-XX: Comentarios del...

Exploit for CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Timeline ================ 202...

Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Details ================ Software: Prinect Archive System Version: v2015 Release 2.6 Homepage: https://www.heidelberg.com Advisory report: https://github.com/alt3kx/CVE-2019-10685 CVE:...

Prinect Archive System 2015 Release 2.6 Cross Site Scripting

Details ================ Software: Prinect Archive System Version: v2015 Release 2.6 Homepage: https://www.heidelberg.com Advisory report: https://github.com/alt3kx/CVE-2019-10685 CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10685 CVSS: 6.1...

Ektron CMS 9.20 SP2 - Improper Access Restrictions

Ektron CMS 9.20 SP2 - Improper Access Restrictions Details ================ Software: Ektron Content Management System CMS Version: 9.20 SP2 Homepage: https://www.episerver.com Advisory report: https://github.com/alt3kx/CVE-2018-12596 CVE: CVE-2018-12596 CVSS: 7.5 HIGH:...

Cyberstop Web Server 0.1 Long Request DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3930/info Cyberstop is a web server for Windows 9x/NT/2000 systems. Attacks can be launched on a Cyberstop host if a request is submitted containing an unusual number of arbitrary characters. Cyberstop web server will sto...

Cisco VPN Client 0day Integer Overflow

/ Cisco VPN Client 0day Integer overflow DOS Proof Of Concept Code By Alex Hernandez aka alt3kx c November 2009 This POC is only for test. If an application read a malformed chars file like this POC, the application will be crashed. We tested this code on: Windows Vista Bussines SP1 Spanish Windo...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx //...

March Networks DVR 3204 - Logfile Information Disclosure

March Networks DVR 3204 - Logfile Information Disclosure !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server...