CVE-2006-3015

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI...

CVE-2006-3015

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI...

CVE-2006-3015

WinSCP 3.8.1 build 328 is vulnerable to an argument injection allowing remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in scp/sftp URIs. Several connected records confirm this issue and note an incomplete fix for CVE-2006-3015; remediation is ...

PT-2006-3920 · Winscp · Winscp

Name of the Vulnerable Software and Affected Versions: WinSCP version 3.8.1 build 328 Description: The issue allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI. Recommendations: For WinSCP version 3.8.1 build 328, upda...

CVE-2006-3015: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI...

Skype Technologies < 2.5.0.78 Arbitrary File Download

Binary data 3627.prm...

Design/Logic Flaw

Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...

CVE-2006-2312: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...

Skype URI Handling Arbitrary File Download (uncredentialed check)

The version of Skype installed on the remote host reportedly may allow a remote attacker to initiate a file transfer to another Skype user by means of a specially crafted Skype URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

infocus

Hi, We have released simple and user friendly GUI FTP fuzzer tool for stress testing FTP server implementations. It is quite configurable tool, which means that you can precisely define which FTP commands will be fuzzed with the parameter size and test strings. Running this fuzzer against FTP...

CVE-2006-1951

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

CVE-2006-1951: Undefined Security Weakness

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

Design/Logic Flaw

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes...

MS Windows Metafile (WMF) Remote File Download Exploit Generator

Exploit for unknown platform in category remote exploits ================================================================ MS Windows Metafile WMF Remote File Download Exploit Generator ================================================================ / \ / WMF nDay download Exploit Generator \ by...

MS Windows Metafile (WMF) Remote File Download Exploit Generator

No description provided by source. / \ / WMF nDay download Exploit Generator \ by Unl0ck Research Team / \ / greetz: rst/ghc ed, uf0, fost , uKt choix, nekd0, payhash, antq , blacksecurity black , 0x557 kaka, swan, sam, nolife , sowhat, tty64 izik ; This sploit is now full shit, so... kiddies par...

Microsoft Windows - Metafile .WMF Arbitrary File Download (Generator)

Microsoft Windows - Metafile .WMF Arbitrary File Download Generator / \ / WMF nDay download Exploit Generator \ by Unl0ck Research Team / \ / greetz: rst/ghc ed, uf0, fost , uKt choix, nekd0, payhash, antq , blacksecurity black , 0x557 kaka, swan, sam, nolife , sowhat, tty64 izik ; This sploit is...

Microsoft Windows - Metafile '.WMF' Arbitrary File Download (Generator)

/ \ / WMF nDay download Exploit Generator \ by Unl0ck Research Team / \ / greetz: rst/ghc ed, uf0, fost , uKt choix, nekd0, payhash, antq , blacksecurity black , 0x557 kaka, swan, sam, nolife , sowhat, tty64 izik ; This sploit is now full shit, so... kiddies party has been started!!! urs, darkeag...

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows...

Hummingbird Collaboration - Crafted URL File Property Obscuration Download

source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...

Double-clicking a link can run a program from the Internet

Links in Web pages only require a single click. When a userdouble-clicks on a Web link, that action is taken as twoseparate clicks: One to follow the link, and the other toany dialog that might appear where the link was.A specially crafted page can place the link so that the"Open" button in the...