CVE-2014-1480: Improper Restriction of Rendered UI Layers or Frames

The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site...

CVE-2014-1480

The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site...

PT-2014-1140

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue is related to a flaw in the file-download implementation, which does not properly restrict the timing of button selections. This allows remote...

Printer File Download Scanner

This module downloads a file from a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Download...

WordPress Persuasion 主题'dl-skin.php'任意文件访问漏洞

BUGTRAQ ID: 64501 Persuasion是一款强大的商业主题。 Persuasion 2.0、2.3版本没有有效过滤用户输入，攻击者可利用此漏洞下载或删除任意文件。 0 mysitemyway persuasion 2.3 mysitemyway persuasion 2.0 厂商补丁： mysitemyway ----------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://mysitemyway.com/theme/persuasion-wordpress-theme/ Exploit Title:...

JCMS system.lua 任意文件下载漏洞

JCMS在代码/usr/lib/lua/luci/controller/api/system.lua中直接从url中获取filename参数，并直接下载，最终导致任意文件下载漏洞。 0 JCMS 升级到官方最新版: http://www.hanweb.com/...

Synology DSM目录遍历漏洞

CVE ID:CVE-2013-6987 Synology DiskStation Manager 是第一个提供网络多任务处理用户接口的NAS操作系统。 Synology DSM目录遍历漏洞漏洞允许任何身份验证的用户访问，创建，删除，修改系统文件和配置文件。 0 Synology DSM = 4.3-3810 Synology ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http:// www.synology.com Following some examples "test" is a valid folder name: - Delete...

Discuz plug-in arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

A txt,word Online Preview of the plug-in,Plug-In address: http://www.discuz.net/forum.php?mod=viewthread&tid=3 1 6 9 5 5 6 AppleScript $doc=$GET'doc'; $doc="../../../".$ doc; $filename=$GET'filename'; $ext=$GET'ext'; //set file type if$ext=='doc' $ext="application/msword"; if$ext=='xls'...

Wordpress Persuasion Theme - Arbitrary File Download and File Deletion Exploit

Exploit for php platform in category web applications Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link:...

WordPress Theme Persuasion 2.x - Arbitrary File Download / File Deletion

Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link: http://mysitemyway.com/theme/persuasion-wordpress-theme/ Version: Tested on 2.0 and 2....

WordPress Persuasion Theme 2.x - Arbitrary File Download and File Deletion Exploit

WordPress Persuasion theme is prone to an arbitrary file download and file deletion exploit vulnerabilities in "http://vulnerable-site.com/wp-content/themes/persuasion/lib/scripts/dl-skin.php". Attacker can download readable files from the server and also can delete contents of writeable...

WordPress Theme Persuasion 2.x - Arbitrary File Download File Deletion

WordPress Theme Persuasion 2.x - Arbitrary File Download File Deletion Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link:...

WordPress Persuasion Theme File Download / Deletion

Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link: http://mysitemyway.com/theme/persuasion-wordpress-theme/ Version: Tested on 2.0 and 2....

JCMS /usr/lib/lua/luci/controller/api/system.lua 任意文件下载漏洞

No description provided by source...

Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://sourceforge.net/projects/webfilebrowser/files/webfilebrowser/ + Google Dork:...

Veno File Manager - 'q' Arbitrary File Download

source: https://www.securityfocus.com/bid/64346/info Veno File Manager is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the...

Veno File Manager Arbitrary File Download

Exploit Title : Veno File Manager Arbitrary File Download Vulnerability Google Dork : allintitle: "Veno File Manager" Date : 10/12/2013 Exploit Author : Daniel Godoy Vendor Homepage :...

Veno File Manager - q Arbitrary File Download

Veno File Manager - q Arbitrary File Download source: https://www.securityfocus.com/bid/64346/info Veno File Manager is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this...

Cisco Cloud Portal Unauthenticated File Download Vulnerability

A vulnerability in the web interface of Cisco Cloud Portal could allow an unauthenticated, remote attacker to download certain file types from a vulnerable server. The vulnerability is due to insufficient enforcement of access controls for certain file types. An attacker could exploit this...

Han Edition through JCMS content management system arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

With this system Government portal, mostly, on Google inurl:gov. cn/jcms way, the amount is not very large. Multiple arbitrary File Download, effects version unknown, probably all affect it. 1. http://target/jcms/m59/sendreport/downfile.jsp?filename=/etc/passwd&savename=passwd.txt To get to the...