CVE-2008-1024

Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption...

Boiling prospect news system arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

=============================================================== Author:Tr4c3dot1 2 6dotcom Copyright http://www.nspcn.org =============================================================== +++ Affected versions: Boiling prospect news systemcore:dust edge elegant environment V1. 1 Access version...

CDNetworks Nefficient Download ActiveX unauthorized access

It's possible to download file to any location...

oblog File Download vulnerability-vulnerability warning-the black bar safety net

Reprint of the famous from http://www.52cmd.cn Today is April Fool's Day., we are not fools, not I do explain. At a glance you can see. The vulnerabilities exist in version 4. 6sql+access, all the way to track down. Vulnerability file: attachment. asp The use is very simple:...

Proviso SiteKiosk File Download Vulnerability

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

sitekiosk-pwn.txt

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

Small conference yxbbs vulnerability-vulnerability warning-the black bar safety net

Source: LiFediy's blog Author: jannock yxbbs is a smaller Forum system,can be considered a good little Forum. Tube party websites is: For their research,found that there is not a small security issue. 1, arbitrary File Download vulnerability. Vulnerability file: ViewFile. asp Function...

e107 Plugin My_Gallery 2.3 Arbitrary File Download Vulnerability

No description provided by source. e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3...

e107mygal-download.txt

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 Link:...

e107 Plugin My_Gallery 2.3 Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications ================================================================ e107 Plugin MyGallery 2.3 Arbitrary File Download Vulnerability ================================================================ e107 MyGallery Plugin Arbitrary File Download...

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 Link:...

e107 My_Gallery Plugin Arbitrary File Download Vulnerability

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 and prior Link:...

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

e107 Plugin MyGallery 2.3 - Arbitrary File Download e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software:...

Directory traversal in MicroWorld eScan Server 9.0.742.98

Luigi Auriemma Application: MicroWorld eScan Server aka eScan Management Console http://www.mwti.net Versions: = 9.0.742.98 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 06 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

eScan Server Management Console (eserv.exe) FTP Server Arbitrary File Download

The version of eScan Management Console / eScan Server installed on the remote host includes an FTP server that is affected by a directory traversal vulnerability. By leveraging this issue, an unauthenticated, remote attacker can retrieve files on the same drive as the application. C Tenable...

Ruby 1.8.61.9 (WEBick HTTPd 1.3.1) - Directory Traversal

Ruby 1.8.61.9 WEBick HTTPd 1.3.1 - Directory Traversal ------------------------------------------------------------------------------------ Digital Security Research Group DSecRG Advisory DSECRG-08-018 Application: Ruby 1.8.6 WEBrick Web server Toolkit and applications that used WEBrick, like...

[DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-08-018 Application: Ruby 1.8.6 WEBrick Web server Toolkit and applications that used WEBrick, like Metasploit 3.1 Versions Affected: Ruby 1.8.4 and all prior versions 1.8.5-p114 and all prior versions 1.8.6-p113 and all prior versions 1.9.0-1...

IDM-OS 1.0 - Filename File Disclosure

IDM-OS 1.0 - Filename File Disclosure --==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91...

Macrovision FLEXnet Connect ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 27279 Macrovision FLEXnet Connect是一种应用软件的厂商为用户提供产品相关的更新及信息发布的工具。 FLEXnet Connect的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞下载任意文件到用户系统。 FLEXnet Connect所使用的DownloadManager控件： ISDM.exe version 6.1.100.61372 MVSNClientDownloadManager61Lib.DownloadManager FCED4482-7CCB-4E6F-86C9-DCB22B52843C...

cutenews-download.txt

!/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS CuteNews 2.6 module file.php Gr33tz-TeaM Dork : inurl:/cutenews/file.php use LWP::UserAgent; if@ARGV!=2 print "=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"; print "-=-=-= CuteNews Arbitrary File Download -=-=-=-=-\n"; print "-=-=-= By Pr0metheuS...