8119 matches found
Atlassian Confluence < 6.13.18 Arbitrary File Read
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.18, 6.14.x 7.4.6 or 7.5.x 7.8.3. It is, therefore, affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary...
Node-RED-Dashboard 任意文件读取漏洞 （CVE-2021-3223）
...
PT-2021-6513 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.11 through 13.11.6 GitLab CE/EE versions 13.12 through 13.12.7 GitLab CE/EE versions 14.0 through 14.0.3 Description: An issue has been discovered in GitLab CE/EE that allows attackers to read arbitrary files on the...
ES File Explorer 4.1.9.7.4 - Arbitrary File Read Exploit
Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' + sys.argv2 + ':5977...
ES File Explorer 4.1.9.7.4 Arbitrary File Read
Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Date: 29/06/2021 Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' +...
ES File Explorer 4.1.9.7.4 - Arbitrary File Read
Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Date: 29/06/2021 Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' +...
The vulnerability of the Icinga Web2 PHP framework allows a hacker to gain access to arbitrary files.
The vulnerability of the PHP framework Icinga Web2 exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to arbitrary files that can be read by the Icinga Web2 process...
KuaiFanCMS Arbitrary File Read Vulnerability
KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...
Exploit for CVE-2021-22201
CVE-2021-22201 CVE-2021–22201 Arbitrary file read on Gitlab...
CVE-2021-3256
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...
CVE-2021-3256
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...
Design/Logic Flaw
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...
CVE-2021-3256
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...
CVE-2021-3256
KuaiFanCMS V5.x has an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. The issue stems from the html_url parameter handling in that module, allowing an attacker to read arbitrary files and potentially obtain sensitive information. Multiple sources (C...
CVE-2021-3256
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...
in hascheksolutions/opentrashmail
✍️ Description Hi, there is a local file inclusion vulnerability in opentrashmail. In https://github.com/HaschekSolutions/opentrashmail/blob/master/web/api.phpL23 : php ?php define'DS', DIRECTORYSEPARATOR; define'ROOT', dirnameFILE; // $action = strtolower$REQUEST'a'; $email =...
KuaiFan 参数注入漏洞
KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...
CVE-2021-33359
A vulnerability exists in gowitness 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file...
Design/Logic Flaw
A vulnerability exists in gowitness 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file...