CVE-2014-4374

CVE-2014-4374 affects NSXMLParser in Foundation on Apple iOS before 8 and OS X Foundation. The flaw arises from an XML External Entity (XXE) handling issue where external entities can be resolved, enabling an attacker to read arbitrary files via XML data containing an external entity declaration....

IBM 1754 GCM KVM Multiple Vulnerabilities

Exploit for windows platform in category remote exploits Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...

Cisco NX-OS Arbitrary File Read Vulnerability (CSCul23419)

A vulnerability in the command-line interface CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access the contents of arbitrary files on the affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...

CVE-2014-3081

prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter...

VM-Turbo-Operations-Manager 4.5.x /cgi-bin/help/doIt.cgi 任意文件读取漏洞

No description provided by source...

Elastic Search 1.1.1 Arbitrary File Read

!/bin/bash Exploit Elastic Search 1.1.1 CVE-2014-3120 Larry W. Cashdollar @larry0 http://www.vapid.dhs.org/exploits/elasticexploit.sh.txt http://bouk.co/blog/elasticsearch-rce/ Vulnerability author Bouke van der Bijl echo "+ Adding initial entry to $1:9200" curl -XPOST "http://$1:9200/data/test/1...

CVE-2014-5029

The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language0 set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537...

DEBIAN-CVE-2014-3537

The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...

IBM GCM16/32 1.20.0.22575 - 多个漏洞

No description provided by source. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendor...

IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities

IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...

IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities

Exploit for php platform in category web applications Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...

IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities

Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendors of this rebranded KVM. I contacte...

Xxe

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization rhevm 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity XXE issue...

Drummond Miles A1Stats 1.0 a1disp3.cgi Traversal Arbitrary File Read

No description provided by source. source: http://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An...

Splunk <= 4.3.3 Arbitrary File Read

No description provided by source. Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...

Phorum 3.x Arbitrary File Read Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1997/info Phorum is a PHP based web forums package. Due to an error in the handling of user input in administrative scripts, any user can view the any file readable by the webserver on the target host. This is due to...

YaBB 9.1.2000 Arbitrary File Read Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=file. Before retrieving the file, YaBB wil...

EMC Cloud Tiering Appliance v10.0 Unauthenticated XXE Arbitrary File Read

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '85903' ssvid version = '1.0' author = 'kikay' vulDate = '2014-04-16' createDate ...

dompdf 0.6.0 (dompdf.php, read param) - Arbitrary File Read

No description provided by source. Vulnerability title: Arbitrary file read in dompdf CVE: CVE-2014-2383 Vendor: dompdf Product: dompdf Affected version: v0.6.0 Fixed version: v0.6.1 partial fix Reported by: Alejo Murillo Moyas Details: An arbitrary file read vulnerability is present on dompdf.ph...

Cisco IDS Device Manager 3.1.1 Arbitrary File Read Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4760/info IDS Device Manager is a web interface to the Cisco IDS systems. It is distributed and maintained by Cisco Systems. The IDS Device Manager may allow a remote user to gain access to sensitive information on the...