Remote file inclusion

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser PhFiTo 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRCPATH parameter to phfito-post...

CVE-2007-5157

CVE-2007-5157 concerns a PHP remote file inclusion vulnerability in the PHP Fidonet Tosser (PhFiTo) 1.3.0 running with phFidoNode. The flaw lies in phfito-post.php, where an attacker can supply a URL in the SRC_PATH parameter to phfito-post and cause arbitrary PHP code execution on the affected s...

Unfixed XSS vulnerability at www.heksen.bespreking.nl

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.heksen.bespreking.nl, which at the time of submission ranked 4049254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. ...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

myflash-rfi.txt

--------------------------------- Oyle Kahpe Ki Dünya ! -------------------------------------- Title : Wordpress plugin myflash = V1.00 wppath RFI Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct: [email protected]...

Unfixed XSS vulnerability at www.stardeveloper.com

Security researcher MaXWeL, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.stardeveloper.com, which at the time of submission ranked 93233 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

alexGuestbook.txt

======================================================================= ======================= @lex Guestbook =ModeliXe.php Remote File Inclusion Exploit ======================================================================= ======================== Bug in :ModeliXe.php Vlu Code :...

Microsoft Excel - Unicode Local Overflow (PoC)

excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat; $format-setbold; $format-setcolor'red';...

Sql injection

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2006-2879

The CVE-2006-2879 entry concerns Alex News-Engine (≤1.5.0): a SQL injection in newscomments.php exploitable via the newsid parameter. This allows remote attackers to run arbitrary SQL commands. No remediation details are provided in the connected documents; risk and exploit specifics are not elab...

CVE-2006-2879

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)

Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...

Panda Remote Heap Overflow

Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...

[Full-disclosure] Kaspersky Antivirus Library Remote Heap Overflow

Date October 3, 2005 Vulnerability The Kaspersky Antivirus Library provides file format support for virus analysis. During analysis of cab files Kaspersky is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited...

[Full-disclosure] Sophos Antivirus Library Remote Heap Overflow

Date August 26, 2005 Vulnerability The Sophos Antivirus Library provides file format support for virus analysis. During analysis of Visio files Sophos is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remotely...

[Full-disclosure] ClamAV Multiple Rem0te Buffer Overflows

Date July 25, 2005 Vulnerability ClamAV is the most widely used GPL antivirus library today. It provides file format support for virus analysis. During analysis ClamAV Antivirus Library is vulnerable to buffer overflows allowing attackers complete control of the system. These vulnerabilities can ...

[Full-disclosure] Computer Associates Vet Antivirus Library Remote Heap Overflow

Date May 23, 2005 Vulnerability Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap...