CVE-2007-4843

Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...

CVE-2007-4756

Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via ".." dot dot backslash sequences in a filename. NOTE: the ".." are not displayed when the user lists files. NOTE: this can be leveraged for code...

Command injection

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 does not require authentication for 1 the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; 2 the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and...

Internet Explorer drag-n-drop vulnerability

By using javaasript in conjunction with shell:startup it's possible to place executable into startup folder if user drags an object on the page or scrolls the page...

CVE-2004-2663: Undefined Security Weakness

The 1 SetDebugging and 2 RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder...

Several home malicious code-vulnerability warning-the black bar safety net

Here to say a few page malicious code:"not is to let everybody put these code into your homepage! Just want everyone to be able to understand the malicious code, play a better protective effect!" A, The Loop code: "Put the following code added to the page, you can achieve the above effects" img...

Path traversal

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

CVE-2006-1161

CVE-2006-1161 affects Easy File Sharing Web Server (EFS) Web Server 3.2. It describes an absolute path traversal that allows remote registered users to upload a malicious file to the Windows startup folder and thereby execute arbitrary code. The provided documents consistently identify the vulner...

CVE-2006-1161: Undefined Security Weakness

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

GlobalSCAPE - CuteFTP macros (*.mcr) Local Vulnerability

No description provided by source. Application: GlobalSCAPE CuteFTP V6.0 http://www.globalscape.com/ Risk: Medium / e-mail: [email protected] web: http://www.prohack.net / --The bug: Atacker can create a crafted CuteFTP macro .mcr, and when its loaded in the target computer, it can download the...

Code execution in Macromedia Shockwave Flash

"Save" command may be used to place malware file anywhere on user's computer including Startup folder...

Microsoft Windows NT 4.0 - User Shell Folders

Microsoft Windows NT 4.0 - User Shell Folders source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set...

Windows Persistent Startup Folder

This module establishes persistence by creating a payload in the user or system startup folder. Works on Vista and newer systems. Module Options msf use exploit/windows/persistence/startup/folder msf undefinedfolder show actions ...actions... msf undefinedfolder set ACTION msf undefinedfolder sho...