phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip www.site.com/path/index.php?mode=select&category shell:...

[SECURITY] Fedora 8 Update: roundcubemail-0.2-5.beta.fc8

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 10 Update: roundcubemail-0.2-4.beta.fc10

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"

Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder ?php / Deadly Script by Super-Crystal bypass Cpanel fantastico www.arab4services.ne...

Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit

No description provided by source. !-- Exodus v0.10 remote code execution exploit by Nine:Situations:Group::strawdog This uses the "-l" argument to overwrite a file inside Microsoft Help and Support Center folders oh rgod... Firstly run netcat in listen mode to drop the vbscript shell run this...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Heap overflow

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC...

dmail / tmail MDA buffer overflow

Buffer overflow in mail delivery foder argument...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

integramod-database.txt

today i found some major security problem. the issue can be found at all integramod 1.4.x versions. explanation of the issue: all integramod versions do have a backup folder where the daily database backups are stored. the coders of integramod forgott to secure this folder. example: just head to...

Force delete any file and folder-vulnerability warning-the black bar safety net

DEL /F /A /Q \?% 1 RD /S /Q \?% 1 Save As. bat To delete files and folders dragged to the batch...

Integramod 1.4.x - Insecure Directory Download Database

today i found some major security problem. the issue can be found at all integramod 1.4.x versions. explanation of the issue: all integramod versions do have a backup folder where the daily database backups are stored. the coders of integramod forgott to secure this folder. example: just head to...

Design/Logic Flaw

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier is affected. The issue is the use of weak password encryption (ROT-25), which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value. No patch/versioned fix is specified in the provided documents. ...

EasySite 2.3 Multiple Remote Vulnerabilities

No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

PT-2008-5134 · Newsoft · Folder Lock

Name of the Vulnerable Software and Affected Versions: Folder Lock versions 5.9.5 and earlier Description: The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypti...

folderlock-disclose.txt

/ Folder Lock = 5.9.5 Local Password Information Disclosure Authors: Charalambous Glafkos George Nicolaou Date: June 19, 2008 Site: http://www.astalavista.com Mail: [email protected] [email protected] Synopsis: Folder Lock 5.9.5 and older versions are prone to local...