phpVibe - Arbitrary File Disclosure

In The Name Of ALLAH Exploit Title: phpVibe ALL versions LFD vulnerability Google Dork: "powered by phpvibe" Date: 2015/07/13 july 13th Exploit Author: ali ahmady -- Iranian Security Researcher snip3rirathotmail.com Vendor Homepage: http://www.phpvibe.com/ Software Link: http://get.phpvibe.com/...

WordPress Cimy User Manager Plugin <= 1.4.2 - Arbitrary File Disclosure

This plugin is prone to "cimyumfilename" arbitrary file disclosure vulnerability. It allows attackers to disclose certain sensitive information. Solution Update plugin...

WordPress Advanced XML Reader Plugin <= 0.1.1 - Arbitrary File Disclosure

This plugin is prone to a XML external entity data parsing arbitrary file disclosure vulnerability. It allows attackers to read system files. Solution Update the plugin...

WordPress Download Shortcode Plugin <= 0.2.0 - Arbitrary File Disclosure

This plugin is prone to "file" arbitrary file disclosure vulnerability. Solution Update the plugin...

WordPress Download Shortcode Plugin <= 0.2.0 - Arbitrary File Disclosure

This plugin is prone to "file" arbitrary file disclosure vulnerability. Solution Update the plugin...

WordPress Advanced XML Reader Plugin <= 0.1.1 - Arbitrary File Disclosure

This plugin is prone to a XML external entity data parsing arbitrary file disclosure vulnerability. It allows attackers to read system files. Solution Update the plugin...

Magento XML-RPC XXE Arbitrary File Disclosure

The Magento application running on the remote web server is affected by an XML external entity injection XXE vulnerability due to improper parsing of XML data in the ZendXmlRpcServer class. A remote, unauthenticated attacker can exploit this vulnerability to view arbitrary files on the remote hos...

Arbitrary File Disclosure and Open Redirect in Bonita BPM

High-Tech Bridge Security Research Lab two vulnerabilities in Bonita BPM Portal Bonita's web interface running by default on port 8080, which can be exploited by remote non-authenticated attacker to compromise the vulnerable web application and the web server on which it is hosted. 1 Path Travers...

SUSE-SU-2015:0863-1 Security update for SUSE Studio

This update provides SUSE Studio 1.3.10, including Amazon's EC2 support for SUSE Linux Enterprise 12 appliances. Additionally, the update includes fixes for the following issues: 904372 - Arbitrary file existence disclosure in sprockets gem CVE-2014-7819 904375 - Arbitrary file existence disclosu...

WordPress Crayon Syntax Highlighter Plugin Arbitrary File Disclosure Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Syntax Highlighter is built with PHP and jQuery syntax highlighting monitor . An information disclosure...

SUSE-SU-2015:0787-1 Security update for rubygem-sprockets-2_11

This update for rubygem-sprockets-211 provides the following security fix: Arbitrary file existence disclosure bnc903658, CVE-2014-7819 Security Issues: CVE-2014-7819...

MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure

A hook is added to ‘init’ in the file ‘miwoftp/miwoftp.php’. This hook is triggered whenever a user visits the front end of the site. The function specified in this hook will proceed to allow the user to download a file within the scope of the home directory of the site. Various values from the G...

WordPress Miwo FTP Plugin <= 1.0.4 - Arbitrary File Disclosure

Because of this vulnerability, users can download a file within the scope of the home directory of the site. Solution Update this plugin...

WordPress IP Blacklist Cloud Plugin <= 3.42 - Arbitrary File Disclosure

This plugin is prone to an arbitrary file disclosure vulnerability. It allows an user with adequate access to the WordPress instance to read files on the system and potentially compromising further credentials such as FTP, MySQL, amongst other sensitive information. Solution Upgrade the plugin...

IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure

The IP Blacklist Cloud plugin exposes several AJAX functions to users. One of these is the ‘importCSVIPCloud’ action, which looks to be used to import CSV files into the systems blacklist. This action is susceptible to Directory Traversal, and does not check file extensions, as such it is possibl...

[RT-SA-2014-016] Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

Hybris Commerce Software Suite 5.x File Disclosure / Traversal

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

Fedora 20 : rubygem-sprockets-2.8.2-5.fc20 (2014-15489)

Contains fix for CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Usage Info python exploit.py http://127.0.0.1:80 flag.txt -- coding: utf-8 -- import urllib2 import sys Tiny Server v1.1.9 Arbitrary File Disclosure Exploit def banner: print "\0331m\03392mTiny Server v1.1.9 Arbitrary File Disclosure Exploit" print "Exploit Write by Yahya Tanisik" print "Contact ...

SysAid < 14.4.2 Arbitrary File Disclosure Vulnerability

SysAid On-Premise is prone to an arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...