CuteEditor 6.0 任意文件下载漏洞

CuteEditor是国外一款非常流行的所见即所得文字编辑器,其6.0版本存在任意文件下载漏洞，攻击者可以利用该漏洞下载任意文件。 CuteEditor 6.0...

WordPress wp-FileManager Plugin File Download Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

GetResourceServlet pre-auth arbitrary file download vulnerability

The GetResourceServlet Servlet is vulnerable to an arbitrary file download attack. As the Servlet doesn’t implement its own authorization checks, this can be exploited anonymously. By taking an attacker controlled name parameter and using this in a call to URLConnection.openConnection, an attacke...

GetResourceServlet pre-auth arbitrary file download vulnerability

The GetResourceServlet Servlet is vulnerable to an arbitrary file download attack. As the Servlet doesn’t implement its own authorization checks, this can be exploited anonymously. By taking an attacker controlled name parameter and using this in a call to URLConnection.openConnection, an attacke...

ResolveURLServlet pre-auth arbitrary file download vulnerability

The ResolveURLServlet Servlet is vulnerable to an arbitrary file download attack. As the Servlet doesn’t implement its own authorization checks, this can be exploited anonymously. By taking an attacker controlled url parameter and using this in a call to URLConnection.openConnection, an attacker...

ResolveURLServlet pre-auth arbitrary file download vulnerability

The ResolveURLServlet Servlet is vulnerable to an arbitrary file download attack. As the Servlet doesn’t implement its own authorization checks, this can be exploited anonymously. By taking an attacker controlled url parameter and using this in a call to URLConnection.openConnection, an attacker...

JVN#02895867: Sleipnir Mobile for Android loads arbitrary Extension API

Sleipnir Mobile for Android has an Extension mechanism to customize browser functions, and this Extension function makes calls to an Extension API. Sleipnir Mobile for Android contains an issue that may allow a specially crafted web page to load an arbitrary Extension API. Impact If a user access...

Power interconnect modeling stand vulnerability-vulnerability warning-the black bar safety net

Brief description: UNCC power interconnection the establishment of the station there is a variety of high-risk vulnerabilities, the basic pass to kill all programs. This time a package requires invitation code Detailed description: Backstage entrance: /manage/login. aspx Forged cookies to bypass...

TRS InfoRadar 4.5 inforadar/jsp/file/file_download.jsp 任意文件下载

No description provided by source...

Linksys E1500 Directory Traversal Vulnerability

This module exploits a directory traversal vulnerability which is present in different Linksys home routers, like the E1500. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys E1500...

CVE-2013-0889

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file...

Code injection

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file...

CVE-2013-0889

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file...

CVE-2013-0889

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file...

CVE-2013-0889

Removed by vendor...

PT-2013-2685

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 25.0.1364.97 on Windows and Linux, and prior to 25.0.1364.99 on Mac OS X Description The issue is related to the improper enforcement of a user gesture requirement before proceeding with a file download. This...

Buffalo TeraStation TS-Series multiple vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Buffalo TeraStation TS-Series multiple vulnerabilities

Exploit for hardware platform in category web applications Buffalo's TeraStation network attached storage NAS solutions offer centralized storage and backup for home, small office and business needs. The firmware is based on Linux ARM and most of the internal software is written using Perl. The...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web:...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

Buffalo TeraStation TS-Series - Multiple Vulnerabilities Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web:...