Design/Logic Flaw

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe aka Windows Explorer program in a directory containing a file that had been downloaded by Safari...

CVE-2010-1805

Removed by vendor...

Unexpected changes in tab focus can be used to run programs from the Internet – Opera Security Advisories

Unexpected changes in tab focus can be used to run programs from the Internet – Opera Security Advisories OPCOM Team | August 12, 2010 Severity Moderate Description Tabs may be used to obscure a download dialog that is visible in another tab. The dialog will allow the user to choose to run...

lftp file overwrite

Downloaded file name in lftpget may be set by server without user confirmation...

Microsoft Windows CHM files protection bypass

It's possible to bypass CHM file locking protection for file downloaded from Internet...

KLA10106 ACE vulnerability in Cisco Secure Desktop

An improperly downloaded files verification vulnerability was found in Cisco Security Desktop. By exploiting this vulnerability malicious users can Execute Arbitrary Code. This vulnerability can be exploited from the network at a point related to Web Install via a specially designed web page...

Jira Atlassian File Attachment Download

Exploit for multiple platform in category web applications ======================================= Jira Atlassian File Attachment Download ======================================= Exploit Title: Jira Atlassian Date: 28/3/2010 Author: Ignacio Garrido Mail: Ign.sec gmail com Software Link:...

zFeeder 1.6 (admin.php) No Authentication Vulnerability

No description provided by source. -----------------:remote bypass admin panel:----------------- ------------------------------------------------------- script:zfeeder 1.6 ------------------------------------------------------------------ download...

Buffer overflow

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

Race condition

Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file...

CVE-2008-2311

Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file...

CVE-2008-2311

Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file...

Apple Safari automatically executes downloaded files based on Internet Explorer zone settings

Overview Apple Safari automatically executes downloaded files based on Internet Explorer zone settings, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description Apple Safari is a web browser that is available for OS X and Microsoft Windows platforms. Apple...

The bully behind the vulnerable-the fully anatomical Thunder shopping system-vulnerability warning-the black bar safety net

Training back is very boring, seeing local Intel branch is one called Thunder shopping system of the entire Station program, Thunder shopping system is domestic a more extensive use of the shopping system, now that we look at it from the safety of what exactly how! Downloaded from the Internet 7....

Macrovision InstallShield升级服务ActiveX控件不安全方式漏洞

BUGTRAQ ID: 26280 CVECAN ID: CVE-2007-5660 MacroVision InstallShield是很多软件厂商都在使用的安装程序解决方案。 Macrovision InstallShield所安装的升级服务（Update Service）可选组件中存在多个不安全的方式，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页控制用户系统。 该组件以以下ActiveX控件的形式实现： CLSID：E9880553-B8A7-4960-A668-95C68BED571E 文件：C:\Windows\Downloaded Files\isusweb.dll...

Pindorama 0.1 - client.php Remote File Inclusion

Pindorama 0.1 - client.php Remote File Inclusion \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Pindorama 0.1 Download : http://downloads.sourceforge.net/pindorama/pindorama-0.1.zip Author : S.W.A.T. HomePage : wWw.XmorS.CoM...

CVE-2007-5278

Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving...

CVE-2007-5025

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

Sisfo Kampus 2006 (dwoprn.php f) Remote File Download Vulnerability

No description provided by source. original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor : http://sisfokampus.net/...

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor :...