CVE-2024-38272

CVE-2024-38272 affects Google's Quick Share (Windows) where an attacker can bypass the Accept File dialog, enabling a transfer without recipient consent. The vulnerability is described as an auth bypass in Quick Share for Windows; the issue is fixed in version 1.0.1724.0 and later. Connected sour...

CVE-2022-31532

The dankolbman/travelblahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2018-7770

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address...

BlueMaho v090417 - Bluetooth Security Testing Suite

BlueMaho is GUI-shell interface for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do - testing to find unknown vulns. Also it can form nice...

[SECURITY] [DLA 148-1] sympa security update

Package : sympa Version : 6.0.1+dfsg-4+squeeze3 CVE ID : CVE-2015-1306 A vulnerability has been discovered in the web interface of sympa, a mailing list manager. An attacker could take advantage of this flaw in the newsletter posting area, which allows sending to a list, or to oneself, any file...

Yahoo! Messenger buffer overflow

Buffer overflow in YMSGR:sendfile? URL on large number of ''...

Дырка в MailFile

С помощью локальной модификации формы можно выслать себе любой файл...

Дырка в Pegasus Mail

Если ссылки mailto: обрабатываются Pegasus Mail, то с помощью подобной ссылки можно отправить любой файл с компьютера пользователя по любому адресу без подтверждения пользователем...