Microsoft Windows - Metafile '.WMF' Arbitrary File Download (Generator)

/ \ / WMF nDay download Exploit Generator \ by Unl0ck Research Team / \ / greetz: rst/ghc ed, uf0, fost , uKt choix, nekd0, payhash, antq , blacksecurity black , 0x557 kaka, swan, sam, nolife , sowhat, tty64 izik ; This sploit is now full shit, so... kiddies party has been started!!! urs, darkeag...

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows...

Hummingbird Collaboration - Crafted URL File Property Obscuration Download

source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...

Double-clicking a link can run a program from the Internet

Links in Web pages only require a single click. When a userdouble-clicks on a Web link, that action is taken as twoseparate clicks: One to follow the link, and the other toany dialog that might appear where the link was.A specially crafted page can place the link so that the"Open" button in the...

CVE-2005-2829

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

CVE-2005-2829

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

CVE-2005-2829: Undefined Security Weakness

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

CVE-2005-3702

CVE-2005-3702 affects Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3. The vulnerability allows remote attackers to cause files to be downloaded to locations outside the download directory by supplying a long file name. The connected documents provide the affected products and the exact impa...

CVE-2005-3702

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

CVE-2005-3702: Undefined Security Weakness

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

Opera web browser file download extension spoofing

The remote host is using Opera - an alternative web browser. This version contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious web site provides a file for download, but crafts the filename in such a way that the fil...

Opera web browser file download extension spoofing

The remote host is using Opera - an alternative web browser. This version contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when a malicious web site provides a file for download, but crafts the filename in such a way that the file...

[Full-disclosure] [NRVA05-08] - Arbitrary file download by NateOn Messagener's ActiveX and DoS

Title: Arbitrary File Download by NateOn Messagener's ActiveX and DoS Discoverer: PARK, GYU TAE [email protected] Advisory No.: NRVA05-08 Critical: Moderately Critical Impact: Arbitrary file download by NateOn Messagener's ActiveX and DoS Where: From remote Operating System: Windows Only...

NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow

NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow source: https://www.securityfocus.com/bid/14974/info NateOn Messenger is susceptible to an arbitrary file download vulnerability, and a buffer overflow vulnerability. These issues are present in the 'NateonDownloadManager.ocx' ActiveX...

NateOn Messenger 3.0 - Arbitrary File Download / Buffer Overflow

source: https://www.securityfocus.com/bid/14974/info NateOn Messenger is susceptible to an arbitrary file download vulnerability, and a buffer overflow vulnerability. These issues are present in the 'NateonDownloadManager.ocx' ActiveX control that is installed with the application. An attacker...

[SA16403] VERITAS Backup Exec Arbitrary File Download Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

MS Internet Explorer COM Objects File Download Exploit (MS05-038)

Exploit for unknown platform in category remote exploits ================================================================= MS Internet Explorer COM Objects File Download Exploit MS05-038 =================================================================...

VERITAS Backup Exec Remote Agent Static Password Arbitrary File Download

The remote host is running a version of VERITAS Backup Exec Agent which is configured with a default root account. An attacker may exploit this flaw to retrieve files from the remote host. C Tenable Network Security, Inc. Credit for the default root account values: - Metsaploit and an anonymous...

Veritas Backup Exec (Windows) - Remote File Access (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-2543: Undefined Security Weakness

Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. dot dot in the download parameter...