CVE-2016-1505

CVE-2016-1505 affects Radicale’s Windows filesystem storage backend prior to 1.1, allowing a remote attacker to read or write arbitrary files via a crafted path such as /c:/file/ignore. The root cause is a directory-traversal flaw in the storage backend that processes crafted paths, enabling acce...

CVE-2016-0754

cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name...

ProjectSend r582 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object Reference Risk...

ProjectSend r582 - Multiple Vulnerabilities

Advisory ID: SGMA-16001 Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object Reference Risk level: 4 / 5 Credit:...

ProjectSend r582 - Multiple Vulnerabilities

ProjectSend r582 - Multiple Vulnerabilities Advisory ID: SGMA-16001 Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object...

Kozea Radicale Arbitrary File Access Vulnerability

Kozea Radicale is a free and open source CalDAV and CardDAV server solution. Kozea Radicale fails to adequately filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting special requests to access arbitrary files...

Kodi 15 - Arbitrary File Aaccess (Web Interface) Vulnerability

Kodi 15 reintroduced an arbitrary file access vulnerability. Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report:...

Kodi 15 - Web Interface Arbitrary File Access

Kodi 15 - Web Interface Arbitrary File Access Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305...

Kodi 15 - Web Interface Arbitrary File Access

Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305 Version: v15 Tested on: linux CVE : n/a kodi...

Kodi 15 Arbitrary File Access

Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305 Version: v15 Tested on: linux CVE : n/a kodi...

TYPO3 Zend Framework Integration扩展任意文件访问漏洞

No description provided by source...

TYPO3 Zend Framework Integration Extension Arbitrary File Access Vulnerability

TYPO3 is the Swiss TYPO3 Association maintains a set of free open source content management system framework CMS/CMF.TYPO3 Zend Framework Integration is one of the integrated Zend Framework extension plug-ins . An arbitrary file access vulnerability exists in TYPO3 Zend Framework Integration...

USN-2793-1 libreoffice vulnerabilities

Federico Scrinzi discovered that LibreOffice incorrectly handled documents inserted into Writer or Calc via links. If a user were tricked into opening a specially crafted document, a remote attacker could possibly obtain the contents of arbitrary files. CVE-2015-4551 It was discovered that...

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

CVE-2015-7601

The CVE-2015-7601 entry describes a directory traversal vulnerability in PCMan FTP Server 2.0.7 that allows remote attackers to read arbitrary files by crafting a RETR command containing traversal strings such as ..//. Connected sources confirm the affected product and the traversal-based disclos...

gollum Upload File Functionality Permits Arbitrary File Access

The gollum gem contains a flaw in its upload file functionality that can allow arbitrary file access. This occurs due to a lack of type checking when handling temporary files during the upload process...

Vulnerability of iOS and Mac OS X operating systems, allowing attackers to read arbitrary files

The vulnerability of the Office Viewer component for iOS and Mac OS X lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted XML document containing links to external objects...

The vulnerability of the Firefox OS operating system, as well as the Firefox and Firefox ESR browsers, allows attackers to circumvent access restrictions, read arbitrary files, and increase their privileges.

The vulnerability of the PDF reader component in the Firefox OS operating system, as well as in Firefox and Firefox ESR browsers, is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls, read arbitrary files, and...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

Exploit for hardware platform in category local exploits +-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B...

Thomsom Cable Modem TWG850-4B ST9C.05.08 Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +...