4023 matches found
Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability
Insomnia Security Vulnerability Advisory: ISVA-080910.1 Name: MS Office OneNote URL Handling Vulnerability Released: 10 September 2008 Vendor Link: http://http://office.microsoft.com/onenote Affected Products: MS Office Onenote 2007 MS Office 2003 and 2007 have vulnerable components Original...
Cross site scripting
Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...
CVE-2008-3850
Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...
CVE-2008-3850
CVE-2008-3850 is an XSS vulnerability in Accellion File Transfer FTA_7_0_135. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to courier/forgot_password.html. Affected product: Accellion File Transfer FTA_7_0_135. Root cause: improper handling of PATH_INFO l...
CVE-2008-3850
Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...
Kyocera Mita Scanner File Utility 3.3.0.1 - File Transfer Directory Traversal
source: https://www.securityfocus.com/bid/30855/info Kyocera Mita Scanner File Utility is prone to a directory-traversal vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to create and overwrite arbitrary files on the affected computer...
Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities
Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30796/info Accellion File Transfer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...
Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/30796/info Accellion File Transfer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...
Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...
CVE-2008-2795
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot or a ..\ dot dot backslash in a response to a LIST command...
Protection anti is Protection error--Taoyuan disk new vulnerability-vulnerability warning-the black bar safety net
Recently I took up the study of“Taoyuan Network Hard security”related tasks. The following operation is the latest of the“Taoyuan Network Hard Disk V3. 1 Personal Edition free version”, so the following is the analysis of vulnerability is possible only for the above version is useful, but the...
Hitachi JP1/File Transmission Server/FTP Denial of Service Vulnerability
Overview Hitachi JP1/File Transmission Server/FTP does not handle certain FTP command arguments properly, which could trigger Denial of Service DoS incidents. Impact An attacker could cause a Denial of Service DoS condition using the FTP commands with certain file names. Solution Please refer to...
NEC MultiWriter 1700C/7500C FTP server vulnerability
Overview NEC printers contain a vulnerability which allow connection to external FTP servers via the printer's internal FTP server. Although the printer's FTP server can connect to a target FTP server, it cannot send files to a target FTP server. Impact A remote attacker could possibly conduct a...
Hitachi JP1/File Transmission Server/FTP Authentication Bypass Vulnerability
Overview Hitachi JP1/File Transmission Server/FTP contains a vulnerability which could be exploited to bypass authentication. Impact An attacker could view the files in a certain directory. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...
FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers
Overview Multiple Canon digital multifunction copiers and laser beam printers contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server. The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer...
Tumbleweed SecureTransport vcst_eu.dll ActiveX控件远程栈溢出漏洞
BUGTRAQ ID: 28666 Tumbleweed SecureTransport是安全的文件传输解决方案，允许用户通过Internet传输敏感文件。 SecureTransport的FileTransfer ActiveX控件（vcsten.dll，CLSID：38681fbd-d4cc-4a59-a527-b3136db711d3）中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 相关代码： interface IActiveXTransfer : IDispatch id0x00000007, helpstring"method TransferFile"...
tumbleweed-overflow.txt
!-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File...
Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit
Exploit for unknown platform in category remote exploits =========================================================== Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit =========================================================== !-- aushack.com - Vulnerability Advisory...
Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow
!-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File...