CVE-2008-2551

CVE-2008-2551 – Icona SpA C6 Messenger DownloaderActiveX control : The DownloaderActiveX.ocx in C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in propDownloadUrl when propPostDownloadAction is set to “run.” This is a remote code execu...

CVE-2007-5608

The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second...

CVE-2007-5608

HP Instant Support HPISDataManager.dll ActiveX control contains the DownloadFile() function vulnerability (CVE-2007-5608). An unauthenticated remote attacker could force the ActiveX to download arbitrary files to a location on the victim’s system via a crafted URL and destination filename. Affect...

Privilege escalation

Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the 1 Desktop directory on Windows or 2 Downloads directory on Mac OS X, and subsequently allows...

nProtect Netizen has multiple vulnerabilities

Overview nProtect Netizen contains multiple vulnerabilities. - It may fetch update files from an arbitrary site - It may download and save malicious files - It may cause an abnormal web browser termination Impact A remote attacker could lead a user to save a malicious file to the local storage an...

沸腾展望新闻系统任意文件下载漏洞

漏洞文件: down.asp Const adTypeBinary = 1 FileName = Request.QueryString"FileName" if FileName = "" Then Response.Write "无效文件名！" Response.End End if FileExt = MidFileName, InStrRevFileName, "." + 1 Select Case UCaseFileExt Case "ASP", "ASA", "ASPX", "ASAX", "MDB" Response.Write "非法操作！" Response.End E...

Oblog vulnerability reproduce,didn't fill good! - Vulnerability warning-the black bar safety net

Program download: http://down.oblog.cn/oblog4/oblog46Final20080403.rar Description: April Fool's Day engraving the brand in a blog published on a Oblog arbitrary File Download vulnerability. 文章 见 http://www.tr4c3.com/post/302.html 0dayApril Fool's Day gift oblog File Download vulnerability...

OBlog任意文件下载漏洞

attachment.asp代码 Path = TrimRequest"path" '获取用户提交的路径 FileID = TrimRequest"FileID" If FileID ="" And Path = "" Then Response.Write "参数不足" Response.End End If ... If CheckDownLoad Or 1= 1Then If Path = "" Then set rs = Server.CreateObject"ADODB.RecordSet" linkdatabase SQL = "select...

Really Supplement? Oblog vulnerability reproduce-bug warning-the black bar safety net

Author: Tr4c3 Was this a gift just to give BK an instant group of friends to share, specifically say not to let get to engage in official, unfortunately or someone first to get the official test, let people is depressed, the T the people, block it. Today released to everyone. Tr4c3at1 2 6dotcom...

μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/28847/info uTorrent WebUI is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application. uTorrent WebUI 0.310 beta 2 is vulnerable; other...

Memory corruption

Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption...

CVE-2008-1024

Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption...

Boiling prospect news system arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

=============================================================== Author:Tr4c3dot1 2 6dotcom Copyright http://www.nspcn.org =============================================================== +++ Affected versions: Boiling prospect news systemcore:dust edge elegant environment V1. 1 Access version...

CDNetworks Nefficient Download ActiveX unauthorized access

It's possible to download file to any location...

oblog File Download vulnerability-vulnerability warning-the black bar safety net

Reprint of the famous from http://www.52cmd.cn Today is April Fool's Day., we are not fools, not I do explain. At a glance you can see. The vulnerabilities exist in version 4. 6sql+access, all the way to track down. Vulnerability file: attachment. asp The use is very simple:...

Proviso SiteKiosk File Download Vulnerability

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

sitekiosk-pwn.txt

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

Small conference yxbbs vulnerability-vulnerability warning-the black bar safety net

Source: LiFediy's blog Author: jannock yxbbs is a smaller Forum system,can be considered a good little Forum. Tube party websites is: For their research,found that there is not a small security issue. 1, arbitrary File Download vulnerability. Vulnerability file: ViewFile. asp Function...

e107 Plugin My_Gallery 2.3 Arbitrary File Download Vulnerability

No description provided by source. e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3...

e107mygal-download.txt

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 Link:...