CVE-2016-1594: Exposure of Sensitive Information to an Unauthorized Actor

Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a 1 downloadLogFiles or 2 downloadFile action...

PT-2016-4878

Name of the Vulnerable Software and Affected Versions Micro Focus Novell Service Desk versions prior to 7.2 Description The issue allows remote authenticated users to read arbitrary attachments via a request to a "LiveTime.woa" URL. This can be achieved by obtaining sensitive information via a 1...

CMS4J 2010 DownloadFile 任意文件下载漏洞

No description provided by source...

Paltalk Messenger 10.0 Insecure Method

Vulnerability ID: HTB23026 Reference: http://www.htbridge.ch/advisory/paltalkmessengeractivexcontrolmultipleinsecuremethods.html Product: Paltalk Messenger Vendor: Paltalk http://www.paltalk.com Vulnerable Version: 10.0 and probably prior Tested on: 10.0 Vendor Notification: 22 June 2011...

CVE-2008-7178: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a downloadfile action to index.php...

HP Online Support Services ActiveX DownloadFile() arbitrary file download

Overview The HP Online Support Services ActiveX control contains a method called DownloadFile. This may allow a remote, unauthenticated attacker to download files to the location of the ActiveX control. Description HP Services provides online product support services including HP Instant Support...

Design/Logic Flaw

The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second...

CVE-2007-5608

The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second...

CVE-2007-5608: Undefined Security Weakness

The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second...

zenturi-navig.txt

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

Zenturi ProgramChecker ActiveX NavigateUrl() Insecure Method Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method/b url:...

Zenturi ProgramChecker ActiveX NavigateUrl() Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Zenturi ProgramChecker ActiveX NavigateUrl Insecure Method Exploit ====================================================================...

Zenturi ProgramChecker - 'ActiveX NavigateUrl()' Insecure Method

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

CVE-2007-3076

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

CVE-2007-3076: Undefined Security Weakness

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/30/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------- bZenturi ProgramChecker...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit ============================================================== 2007/05/30...

Zenturi ProgramChecker - ActiveX File Download/Overwrite

2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2659: Undefined Security Weakness

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager phpATM 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. dot dot in the directory parameter in a downloadfile action...

CVE-2006-4955: Undefined Security Weakness

Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. dot dot sequence in the 1 savefolder and 2 savefilename parameters...