CVE-2005-2407: Improper Restriction of Rendered UI Layers or Frames

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking"...

[Full-disclosure] HAURI live update. Arbitrary remote file download and execute vulnerability

Dear F/D Mailling -----------Cut Cut-------------------------------- Title: HAURI live update. Arbitrary remote file download and execute vulnerability Discoverer: Original discoverer Neo Original exploit improver PARK, GYU TAE [email protected] Advisory No.: NRVA05-03 Critical: High Critic...

CVE-2004-2227

CVE-2004-2227 affects Mozilla Firefox prior to 1.0. The issue is in the file download dialog where long filenames are truncated, which can mislead users into downloading files with dangerous extensions. The documented remediation is to upgrade to Mozilla Firefox 1.0 or newer (and related Firefox/...

CVE-2004-2227

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions...

CVE-2004-2227: Undefined Security Weakness

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions...

FreeBSD : egroupware -- arbitrary file download in JiNN (39953788-6bbb-11d9-8bc9-000a95bc6fae)

eGroupWare contains a bug in the JiNN component that allows a remote attacker to download arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidri...

FreeBSD : trac -- file upload/download vulnerability (b02c1d80-e1bb-11d9-b875-0001020eed82)

Stefan Esser reports : Trac's wiki and ticket systems allows to add attachments to wiki entries and bug tracker tickets. These attachments are stored within directories that are determined by the id of the corresponding ticket or wiki entry. Due to a missing validation of the id parameter it is...

eRoom 6.0 PlugIn - Insecure File Download Handling

source: https://www.securityfocus.com/bid/14176/info The eRoom plug-in is prone to an insecure file download handling vulnerability. The issue is due to a design fault, where files that are shared by users are apparently passed to default file handlers when downloaded. This can occur without user...

eRoom 6.0 PlugIn - Insecure File Download Handling

eRoom 6.0 PlugIn - Insecure File Download Handling source: https://www.securityfocus.com/bid/14176/info The eRoom plug-in is prone to an insecure file download handling vulnerability. The issue is due to a design fault, where files that are shared by users are apparently passed to default file...

raidenftpdTraverse.txt

Product : RaidenFTPD Affected Versions : quote site urlget file://..\boot.ini 550 site urlget failed : hacking attempt , you have been logged. ftp quote site urlget file:/..\boot.ini 220 site urlget : downloading file:/..\boot.ini-boot.ini ftp ls 200 Port command ok. 150 Opening ASCII data...

PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit

No description provided by source. !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in...

CVE-2005-1994

Finjan SurfinGate 7.0SP2/SP3 is affected by CVE-2005-1994. The vulnerability allows remote attackers to download blocked files by supplying hex-encoded characters in a filename (demonstrated with "%2e"). The reported impact is partial confidentiality, with no documented integrity/availability imp...

CVE-2005-1994: Undefined Security Weakness

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...

JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure

JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplie...

JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure

source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplied request data. Information that attackers can harvest throu...

URL-Encoding Problem in Finjan SurfinGate

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY - ------- The Finjan SurfinGate use web content filtering and internet access management for protecting the network. A vulnerability in the product allows you to bypass the access management. You can download files which are normally blocked...

CVE-2004-2083

Summary: Opera Web Browser 7.0–7.23 is affected by a file-download extension spoofing flaw. When a malicious site provides a downloadable file, the filename may embed a CLSID that makes the file appear as a trusted type, tricking users into executing it. This can lead to arbitrary code execution ...

CVE-2004-2083

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."...

CVE-2004-2083: Undefined Security Weakness

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."...

CVE-2005-1575

The CVE-2005-1575 issue concerns Mozilla Firefox for Windows (versions 0.10.1 and 1.0) where the file download dialog could misrepresent a file’s type. The root cause described across connected records is that a malicious HTTP Content-Type header combined with a filename containing whitespace, do...