TFTPD32 2.50 - Arbitrary File Download/Upload

source: https://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files with trojaned copies, used to open...

CVE-2001-0574: Undefined Security Weakness

Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' dot dot in the URL...

Microsoft Windows Media Player 7.0 - '.wmz' Arbitrary Java Applet

source: https://www.securityfocus.com/bid/2203/info A vulnerability has been reported in Microsoft Windows Media Player 7 which is exploitable through Internet Explorer and Java. Skins are downloadable files which change the appearance of a program's user interface. Skins for Windows Media Player...