Azucar CMS <= 1.3 (admin/index_sitios.php) File Inclusion Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Azucar CMS = 1.3 VIEW Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Softwar...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

AOL Instant Messenger 4.8.2790 Local File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files to a user of the...

Outlook ATTACH_BY_REF_ONLY File Execution

No description provided by source. $Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

TSEP <= 0.942 (copyright.php) Remote Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class ...............

LineWeb 1.0.5 Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these issues to...

Microsoft Internet Explorer 5.0.1/6.0 Content-Disposition Handling File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4752/info An issue exists in the way Microsoft Internet Explorer handles conflicting information in some HTTP headers used to describe non-HTML content. A malicious web server may provide content with misleading values in...

CVE-2014-2720

IZArc 4.1.8 is vulnerable due to a mismatch between ZIP Central Directory data (file name) and the Local File Header used to launch the file. This allows user‑assisted remote attackers to perform file‑extension spoofing that can lead to unintended code execution, demonstrated when a .jpg in the C...

Executable File With Non-Executable File Extension Arbitrary File Execution

Certain malicious executable files can be hidden using arbitrary filename extensions. A remote attacker could exploit this vulnerability to entice unsuspecting users to execute arbitrary files...

Internet Explorer Mouse Drag Hijack Arbitrary File Execution - Ver2 (CVE-2004-0841)

An arbitrary file execution vulnerability has been reported in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute and install arbitrary programs on the affected system...

Java 7 Update 11 vulnerability to download and execute

Java 7 Update 11 vulnerability to download and execute. With this applet you can boot from a remote host and execute the file, bypassing pisochnitsy java, also affected and older. Usage Info All material is provided with source code, and you will be able to easily assemble ready exploit replacing...

PhotoStore 4.0.7 Arbitary File Execution

Exploit for php platform in category web applications ​ . \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://tcc.sch.id ​ Exploit title : PhotoStore 4.0.7 shell upload Author...

WordPress Theme Suco - 'themify-ajax.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/63836/info The Suco themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload...

Double Executable File Extension Arbitrary File Execution

Certain malicious executable files can be hidden using double extension filenames...

Open Flash Chart 2 Arbitrary File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Open Flash Chart v2 Arbitrary File Upload", 'Description' = %q This module exploits a file upload vulnerability found in Open Flash...

WordPress Theme Daily Deal - Arbitrary File Upload

WordPress Theme Daily Deal - Arbitrary File Upload source: https://www.securityfocus.com/bid/63257/info The Daily Deal theme is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attack...

Debian Security Advisory DSA 2591-1 (mahara - several vulnerabilities)

Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution. OpenVAS Vulnerability Test $Id: deb25911.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from...

Mitsubishi MC-WorkX 8.02 File Execution

Mitsubishi MC-WorkX Suite Insecure ActiveX Control IcoLaunch This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code from a remote share. Calc is used in this example...

Mitsubishi MC-WorkX 8.02 - ActiveX Control IcoLaunch File Execution

Mitsubishi MC-WorkX 8.02 - ActiveX Control IcoLaunch File Execution Mitsubishi MC-WorkX Suite Insecure ActiveX Control IcoLaunch This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code...

Mitsubishi MC-WorkX 8.02 ActiveX Control (IcoLaunch) File Execution

Exploit for windows platform in category remote exploits Mitsubishi MC-WorkX Suite Insecure ActiveX Control IcoLaunch This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code from a remo...