Winamp Web接口多个安全漏洞

Winamp Web接口（Wawi）是Winamp的一个开源插件，允许用户通过Web浏览器远程管理媒体播放器。 Wawi的实现后半辈子存在多个安全漏洞，具体如下： ----------------------------------- A FindBasicAuth缓冲区溢出 ----------------------------------- FindBasicAuth函数位于security.cpp，用于解析客户端请求中的Authorization...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

Winamp Web interface 7.5.13 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A denial-of-service issue - An information-disclosure issue An...

CVE-2006-6432: Undefined Security Weakness

Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors...

CVE-2006-6240

Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary directories and download arbitrary files via a .. dot dot sequence in an FTP command argument, as demonstrated by RETR GET or STOR PUT. NOTE: The provenance of th...

HTTP Upload Tool (download.php) Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...

CVE-2006-5791

Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...

America Online ICQ 5.1 - ActiveX Control Remote Code Execution

America Online ICQ 5.1 - ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/20930/info The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. An attacker could exploit this issue simply by sending a message to a victim ICQ user...

America Online ICQ ActiveX Control Arbitrary File Download and Execute

This module allows remote attackers to download and execute arbitrary files on a users system via the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control. Module Options msf use exploit/windows/browser/aol/icqdownloadagent msf undefinedicqdownloadagent show actions ...actions...

America Online ICQ ActiveX Control Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of AOL ICQ. User interaction is not required to exploit this vulnerability. The specific flaw exists in the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control with the following CLSID:...

CVE-2006-5658

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...

CVE-2006-5658

The CVE-2006-5658 entry concerns the BlooMooWeb ActiveX control (AidemATL.dll). The connected sources indicate three vulnerable methods: BW_DownloadFile (bstrUrl parameter allows downloading arbitrary files), BW_LaunchGame (bstrParams parameter allows executing arbitrary local files), and BW_Dele...

CVE-2006-5658: Undefined Security Weakness

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities source: https://www.securityfocus.com/bid/20827/info BlooMooWeb ActiveX control is prone to multiple vulnerabilities, including: - an arbitrary file-download issue - an arbitrary code-execution issue - an arbitrary file-deletion issue. A...

BlooMooWeb 1.0.9 - ActiveX Control Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/20827/info BlooMooWeb ActiveX control is prone to multiple vulnerabilities, including: - an arbitrary file-download issue - an arbitrary code-execution issue - an arbitrary file-deletion issue. An attacker can exploit these issues to download arbitrary...

Simple Website Software 0.99 (common.php) File Include Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Script: Simple Website Software v0.99 common.php Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found:...

CVE-2006-5596

CVE-2006-5596 affects the SSL server component of AEP Smartgate 4.3b. The vulnerability is a directory traversal that allows remote attackers to download arbitrary files by sending HTTP GET requests containing dot-dot backslash sequences (..\

CVE-2006-5596: Undefined Security Weakness

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ dot dot backslash sequences in an HTTP GET request...

AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit

No description provided by source. / prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement,...

AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit

Exploit for unknown platform in category remote exploits ======================================================== AEP SmartGate 4.3b GET Arbitrary File Download Exploit ======================================================== / prdelka-vs-AEP-smartgate ======================== Smartgate is an...