Alex Article-Engine 1.3.0 - 'FCKeditor' Arbitrary File Upload

Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx //...

March Networks DVR 3204 - Logfile Information Disclosure

March Networks DVR 3204 - Logfile Information Disclosure !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server...

Remote file inclusion

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser PhFiTo 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRCPATH parameter to phfito-post...

CVE-2007-5157

CVE-2007-5157 concerns a PHP remote file inclusion vulnerability in the PHP Fidonet Tosser (PhFiTo) 1.3.0 running with phFidoNode. The flaw lies in phfito-post.php, where an attacker can supply a URL in the SRC_PATH parameter to phfito-post and cause arbitrary PHP code execution on the affected s...

CVE-2007-5157: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser PhFiTo 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRCPATH parameter to phfito-post...

Unfixed XSS vulnerability at www.heksen.bespreking.nl

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.heksen.bespreking.nl, which at the time of submission ranked 4049254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. ...

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...

myflash-rfi.txt

--------------------------------- Oyle Kahpe Ki Dünya ! -------------------------------------- Title : Wordpress plugin myflash = V1.00 wppath RFI Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct: [email protected]...

Unfixed XSS vulnerability at www.stardeveloper.com

Security researcher MaXWeL, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.stardeveloper.com, which at the time of submission ranked 93233 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

alexGuestbook.txt

======================================================================= ======================= @lex Guestbook =ModeliXe.php Remote File Inclusion Exploit ======================================================================= ======================== Bug in :ModeliXe.php Vlu Code :...

Microsoft Excel - Unicode Local Overflow (PoC)

excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat; $format-setbold; $format-setcolor'red';...

Sql injection

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2006-2879

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2006-2879

The CVE-2006-2879 entry concerns Alex News-Engine (≤1.5.0): a SQL injection in newscomments.php exploitable via the newsid parameter. This allows remote attackers to run arbitrary SQL commands. No remediation details are provided in the connected documents; risk and exploit specifics are not elab...

CVE-2006-2879: Undefined Security Weakness

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)

Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...

Panda Remote Heap Overflow

Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...