CVE-2009-3931: Improper Input Validation

Incomplete blacklist vulnerability in browser/download/downloadexe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by 1 .mht and 2 .mhtml files, which are...

Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Windows)

This host is installed with Mozilla Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnnov09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Nov-09 Windows Authors: Sharath S Copyright: Copyright c...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6616)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Firefox < 3.0.15 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.15. Such versions are potentially affected by the following security issues : - It may be possible for a malicious web page to steal form history. MFSA 2009-52 - By predicting the filename of an already downloaded file in the downloads director...

CentOS 3 / 4 : seamonkey (CESA-2009:1531)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Mozilla Firefox < 3.0.15 / 3.5.4 Multiple Vulnerabilities

Binary data 5218.prm...

SeaMonkey < 2.0 Multiple Vulnerabilities

Binary data 5219.prm...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

phpCMS 2008 - download.php Information Disclosure

phpCMS 2008 - download.php Information Disclosure source: https://www.securityfocus.com/bid/42514/info PHPCMS2008 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the...

DSquare Exploit Pack: D2SEC_XUPLOAD2

Name| d2secxupload2 ---|--- CVE| CVE-2009-3693 Exploit Pack| D2ExploitPack Description| HP LoadRunner XUpload.ocx ActiveX Arbitrary File Download Vulnerability Notes|...

Altirix eXpress NS SC Download ActiveX控件任意文件下载漏洞

Bugraq ID: 36346 Altirix eXpress NS SC Download ActiveX是一款下载管理控件。 Altirix eXpress NS SC Download ActiveX控件不正确处理下载方法，远程攻击者可以利用漏洞下载并执行任意程序。 Altiris.AeXNSPkgDL.1 ActiveX"AeXNSPkgDLLib.dll"控件提供的"DownloadAndInstall"方法不安全，构建恶意的WEB页，诱使用户打开，可导致以登录用户安全上下文执行任意程序。 Symantec Deployment Solution 6.9 SP3 Symant...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute

This module allows remote attackers to install and execute arbitrary files on a users file system via AeXNSPkgDLLib.dll 6.0.0.1418. This module was tested against Symantec Altiris Deployment Solution 6.9 sp3. Module Options msf use...

Groovy Media Player 1.2.0 (.m3u) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Groovy Media Player 1.2.0 .m3u Local Buffer Overflow PoC ========================================================== !/usr/bin/python print "Groovy Media Player 1.2.0 .m3u local stack...

Groovy Media Player 1.2.0 (.m3u) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/python print "Groovy Media Player 1.2.0 .m3u local stack overlow POC" print " finded by : opt!x hacker [email protected] " print "download: http://www.bestwebsharing.com/downloads/groovy-media-player-setup.exe " junk = "\x41"213 file=open"crash.m3u","w"...

MyBackup 1.4.0 (AFD/RFI) Multiple Remote Vulnerabilities

No description provided by source. + MyBackup 1.4.0 Remote File Inclusion AFD/RFI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download Script : http://www.tufat.com/fileslgpl/script96.zip + Arbitrary File Download - PoC...

QuickDev 4 Php File Download

QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...