Rediff Bol Downloader允许文件下载及执行漏洞

Rediff Bol是一款即时通信工具。 Rediff Bol的Downloader控件在处理文件下载时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意命令。 Rediff Bol的Downloader控件允许任意网页下载并执行任意位置的程序而不会对其过滤，在IE中执行远程的程序时会报警，但在执行本地程序时不会有提示。 Rediff Bol Downloader 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.rediff.com/newbol/ Gregory R. Panakkal...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

[Full-disclosure] Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files

Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal...

Shadowed Portal Module Character Roster - mod_root Remote File Inclusion

Shadowed Portal Module Character Roster - modroot Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shadowed Portal 5.7. Roster Module modroot Remote File Include...

CVE-2006-6513

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

Winamp Web接口多个安全漏洞

Winamp Web接口（Wawi）是Winamp的一个开源插件，允许用户通过Web浏览器远程管理媒体播放器。 Wawi的实现后半辈子存在多个安全漏洞，具体如下： ----------------------------------- A FindBasicAuth缓冲区溢出 ----------------------------------- FindBasicAuth函数位于security.cpp，用于解析客户端请求中的Authorization...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

Winamp Web interface 7.5.13 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A denial-of-service issue - An information-disclosure issue An...

CVE-2006-6240

Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary directories and download arbitrary files via a .. dot dot sequence in an FTP command argument, as demonstrated by RETR GET or STOR PUT. NOTE: The provenance of th...

HTTP Upload Tool (download.php) Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...

CVE-2006-5791

Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...

America Online ICQ ActiveX Control Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of AOL ICQ. User interaction is not required to exploit this vulnerability. The specific flaw exists in the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control with the following CLSID:...

America Online ICQ 5.1 - ActiveX Control Remote Code Execution

America Online ICQ 5.1 - ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/20930/info The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. An attacker could exploit this issue simply by sending a message to a victim ICQ user...

CVE-2006-5658

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...

CVE-2006-5658

The CVE-2006-5658 entry concerns the BlooMooWeb ActiveX control (AidemATL.dll). The connected sources indicate three vulnerable methods: BW_DownloadFile (bstrUrl parameter allows downloading arbitrary files), BW_LaunchGame (bstrParams parameter allows executing arbitrary local files), and BW_Dele...

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/20827/info BlooMooWeb ActiveX control is prone to multiple vulnerabilities, including: - an arbitrary file-download issue - an arbitrary code-execution issue - an arbitrary file-deletion issue. An attacker can exploit these issues to download arbitrary...

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities source: https://www.securityfocus.com/bid/20827/info BlooMooWeb ActiveX control is prone to multiple vulnerabilities, including: - an arbitrary file-download issue - an arbitrary code-execution issue - an arbitrary file-deletion issue. A...

Simple Website Software 0.99 (common.php) File Include Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Script: Simple Website Software v0.99 common.php Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found:...

CVE-2006-5596

CVE-2006-5596 affects the SSL server component of AEP Smartgate 4.3b. The vulnerability is a directory traversal that allows remote attackers to download arbitrary files by sending HTTP GET requests containing dot-dot backslash sequences (..\

AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit

No description provided by source. / prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement,...