CVE-2020-15658

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...

Mozilla Code Issues Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34799)

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. An access control error vulnerability exists in several Schneider Electric products. An attacke...

CVE-2019-3571

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension...

The vulnerability of the Safari browser, which allows a hacker to trigger a service failure

The vulnerability of the Downloads function in the Safari browser is related to an incorrect file extension. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially crafted website...

FreeBSD : froxlor -- database password information leak (9ee72858-4159-11e5-93ad-002590263bf5)

[email protected] reports : An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file permissions of the /logs/ folder in froxlor version 0.9.33.1 and earlier. The plain SQL password and username may be stored in the /logs/sql-error.log file...

Froxlor 0.9.33.1 MySQL Login Disclosure

------------------------------------------------------------------------------------------ Exploit Title: Froxlor Server Management Panel - MySQL Login Information Disclosure Date: Jul 30 2015 Exploit Author: Dustin Dörr Vendor Homepage: https://www.froxlor.org/ Version:...

Ark 2.16 Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110726 Date: 26th July 2011 Author: Tim Brown URL: / Product: Ark 2.16 Vendor: KDE Risk: Medium Summary The Ark archiving tool is vulnerable to directory traversal via malformed Zip files. When attempts are made...

Debian DSA-555-1 : freenet6 - wrong file permissions

Simon Josefsson noticed that the tspc.conf configuration file in freenet6, a client to configure an IPv6 tunnel to freenet6.net, is set world readable. This file can contain the username and the password used to contact the IPv6 tunnelbroker freenet6.net. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...