VMSA-2012-0018 : VMware security updates for vCSA and ESXi

a. vCenter Server Appliance directory traversal The vCenter Server Appliance vCSA contains a directory traversal vulnerability that allows an authenticated remote user to retrieve arbitrary files. Exploitation of this issue may expose sensitive information stored on the server. VMware would like ...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

Symantec Messaging Gateway version 9.5.3-3 suffers from an authenticated arbitrary file download vulnerability. ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266...

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Referenc...

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

NGS000266 Technical Advisory: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

Alog CMS system XSS arbitrary File Download read vulnerability-vulnerability warning-the black bar safety net

| Alog CMS Background any download any remove any of the columns of the directory 漏洞 文件 :admin/mod/uploadfile.mod.php $baseDir = SITEROOT.'static/upload/'; $currentDir = $GET'dir' ? $GET'dir' : $POST'dir' ? $POST'dir' : "; //without any filter $currentPath = $baseDir.$ currentDir; Any download...

Novell File Reporter Agent FSFUI UICMD 126 Arbitrary File Download

The version of Novell File Reporter Agent running on the remote host has an arbitrary file download vulnerability. Making a specially crafted POST request to /FSF/CMD for records with a name of FSFUI and UICMD of 126 could result in arbitrary files being downloaded. A remote, unauthenticated...

Xivo 1.2 arbitrary File Download-vulnerability warning-the black bar safety net

Xivo 1.2 Arbitrary File Download under root privileges Author : Mr. Un1k0d3r Developer: https://wiki.xivo.fr Download address: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Effect version: 1.2 last patched version Test version: Linux xivo 2.6.32-5-4 8 6 Test using: Using the...

Xivo 1.2 Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Version: 1.2...

CMS4J 2010 DownloadFile 任意文件下载漏洞

No description provided by source...

Xivo 1.2 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...

Xivo 1.2 - Arbitrary File Download

Xivo 1.2 - Arbitrary File Download Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...

Xivo 1.2 - Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Version: 1.2...

Tech-ex kesioncms7. 0 arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

Tech-ex kesioncms7 vulnerability, is a high-risk vulnerability Vulnerability detection method: The first registered user login, Access/user/Contributor. asp can see a few can contribute to the classification, select the software submission. Point the next step! Then skip to:/user/UserMySoftWare...

NGS00266 Patch Notification: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL

Medium risk vulnerability in Symantec Messaging Gateway 18 September 2012 Ben Williams of NCC Group has discovered a Medium risk vulnerability in Symantec Messaging Gateway Impact: Authenticated arbitrary file download Versions affected: Symantec Messaging Gateway 9.5.3-3 An updated version of th...

HP SiteScope getFileInternal Arbitrary File Download

The version of HP SiteScope hosted on the remote web server has an arbitrary file download vulnerability. The application hosts a web service that allows the getFileInternal method to be invoked without authentication. A remote, unauthenticated attacker could exploit this to download arbitrary...

CVE-2012-4596: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in McAfee Email Gateway MEG 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL...

Symantec Web Gateway 5.0.28 LFI / Code Execution

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...

symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...