PT-2021-16270

Name of the Vulnerable Software and Affected Versions: WordPress Download Manager versions prior to 3.2.16 Description: The issue allows high privilege users to perform XSS attacks even when the unfiltered html capability is disallowed, due to the plugin not escaping some of the Download settings...

CVE-2020-9784

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

CVE-2020-9784

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

CVE-2020-9784

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

CVE-2020-9784

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

CVE-2020-9784

CVE-2020-9784 affects Safari 13.1 on macOS (Mojave/High Sierra/Catalina). The vulnerability arises from a logic issue in handling per-site download permissions, URL schemes, and origin checks, allowing a malicious iframe to misuse another website’s download settings. Apple fixed the issue in Safa...

CVE-2020-9784: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

PT-2020-20758

Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.1 Description A logic issue was addressed with improved restrictions. A malicious iframe may use another website's download settings. Recommendations For versions prior to 13.1, update to Safari 13.1 to resolve the...

CVE-2018-11346

An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "downloadsyssettings" action and then specify files arbitrarily throughout the system via the act parameter...

Code injection

Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...