8072 matches found
Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller
PoC exploit for CVE-2023-3519, an arbitrary file read vulnerabil...
Arbitrary File Read
gitlab is vulnerable to Arbitrary File Read. This vulnerability occurs due to a flaw in the way that GitLab handles Wiki pages. An attacker can exploit this vulnerability to read arbitrary files on the server, including files that are not accessible to normal users...
Ozeki SMS Gateway 10.3.208 Arbitrary File Read
Exploit Title: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read Unauthenticated Date: 01.08.2023 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://ozeki-sms-gateway.com Software Link: https://ozeki-sms-gateway.com/attachments/702/installwindows1689352737OzekiSMSGateway10.3.208.zip...
Ozeki SMS Gateway 10.3.208 - Arbitrary File Read Vulnerability
Exploit Title: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read Unauthenticated Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://ozeki-sms-gateway.com Software Link: https://ozeki-sms-gateway.com/attachments/702/installwindows1689352737OzekiSMSGateway10.3.208.zip Version: 10.3.208...
Ozeki SMS Gateway 10.3.208 - Arbitrary File Read (Unauthenticated)
Exploit Title: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read Unauthenticated Date: 01.08.2023 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://ozeki-sms-gateway.com Software Link: https://ozeki-sms-gateway.com/attachments/702/installwindows1689352737OzekiSMSGateway10.3.208.zip...
Arbitrary File Read Vulnerability in Sky Mirror Vulnerability Scanning and Management System of Kaixingchen Information Technology Group Co.
Sky Mirror Vulnerability Scanning and Management System is a vulnerability scanning product independently developed by Qixing, a network-based vulnerability analysis, assessment and management system. Sky Mirror Vulnerability Scanning and Management System of Qixing Information Technology Group...
USN-6266-1 librsvg vulnerability
Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element...
Gitlab -- Vulnerabilities
Gitlab reports: ReDoS via ProjectReferenceFilter in any Markdown fields ReDoS via AutolinkFilter in any Markdown fields Regex DoS in Harbor Registry search Arbitrary read of files owned by the "git" user via malicious tar.gz file upload using GitLab export functionality Stored XSS in Web IDE Beta...
XML External Entity (XXE)
getkirby/cms is vulnerable to XML External Entity XXE. The vulnerability exists due to a lack of data handler validation in the parse function in Xml.php, which allows an attacker to submit a malicious XML file, resulting in an arbitrary file being read on the target system...
Deserialization Of Untrusted Data
manager-pojo is vulnerable to Deserialization Of Untrusted Data. The vulnerability exists because the MySQLSinkDTO.java does not properly check encoding in the MySQL JDBC URLs, which allows an attacker to bypass the current logic and achieve arbitrary file read through the...
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, related to incorrect path name restrictions, allows attackers to read arbitrary files.
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files through the...
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is due to an incorrect restriction on the path to the restricted access directory. This allows attackers to read arbitrary files from the root privileged filesystem.
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to read arbitrary...
Node.js: WASI sandbox escape via symlink
A WASI + WASM program was discovered to be able to use pathsymlink to read arbitrary files on the host machine by creating a symlink in a preopen to a different location on the local file system, thereby escaping the WASI sandbox...
Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read (CVE-2019-1588)
A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...
The Ministry of Justice Applicant Programme 代码问题漏洞
The Ministry of Justice Applicant Programme is a Department of Justice applicant programme application organized by The Ministry of Justice. A security vulnerability exists in Applicant Programme V7.06 and prior versions, which stems from an improper restriction of XML external entity references,...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
ImageMagick-lfi-poc ImageMagick Arbitrary Read Files - CVE...
Arbitrary File Read
gitlab is vulnerable to Arbitrary File Read. The vulnerability exists due to the incorrect way of handling files, which allows an attacker to read content of the file when importing to the groups...
CVE-2023-32635
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...
JVN#44726469: Improper restriction of XML external entity references (XXE) in XBRL data create application
XBRL data create application provided by Financial Services Agency improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker. Solution Update the Software Update the software to the...