CVE-2016-6410

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856...

Exponent CMS File Upload Vulnerability

Exponent CMS employs an intuitive and flexible content editing system that allows website pages to be edited on-page as it is displayed. A file upload vulnerability exists in Exponent CMS due to a failure to properly validate user input. This allows attackers to exploit the vulnerability to uploa...

WordPress Neosense Theme Upload Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation.Neosense is a dynamic news theme for WordPress. An upload vulnerability exists in WordPress Neosense Theme. An attacker can exploit this vulnerability to upload arbitrary files to the...

Libarchive Information Disclosure Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive, which can be exploited by an attacker to overwrite arbitrary files...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

Code injection

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

CVE-2016-5418

CVE-2016-5418 affects libarchive up to and including version 3.2.0, where sandboxing of archives with hardlinks mishandles entries of non-zero data size. This can allow a remote attacker to write to arbitrary files via a crafted archive, as described in multiple advisories. Public reports referen...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

Trend Micro Control Manager task_controller Information Disclosure

An information disclosure vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to lack of validation of the 'url' parameter in the request for taskcontrol.php. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted HT...

SAP Profile Maintenance Directory Traversal Vulnerability

SAP is a provider of enterprise management software and solutions. A directory traversal vulnerability exists in SAP Profile Maintenance. Because the program fails to repeat user-supplied input, a remote attacker could exploit a specially crafted request with a directory traversal sequence '... /...

The vulnerability of the CODESYS Runtime Toolkit execution environment allows a perpetrator to read and write arbitrary files.

The vulnerability of the CODESYS Runtime Toolkit execution environment exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read, write, and create arbitrary files by utilizing the “..” element in the path wh...

Exponent CMS Directory Traversal Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A directory traversal...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6405

Cisco Fog Director for IOx (version 1.0(0)) is vulnerable to an arbitrary file write via the Cartridge interface. The root cause is insufficient input validation, allowing an authenticated, remote attacker to bypass access restrictions and write/overwrite arbitrary files. Published advisories (Ci...

Trend Micro Internet Security vulnerability where files may be excluded as scan targets

Overview Trend Micro Internet Security provided by Trend Micro Incorporated contains a vulnerability where arbitrary files or folders may be excluded as scan targets when the conditions below are met. An attacker can place a specific file into the system The attacker can execute a specific API fr...

Micro Focus NetIQ Sentinel Server ReportViewServlet Directory Traversal (CVE-2016-1605)

The vulnerability is due to insufficient validation of fileName parameter within the ReportViewServlet servlet. A remote, authenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the target server. Successful exploitation allows the attacker to read the content ...

Trend Micro Control Manager 6.x < 6.0 SP3 Hotfix 3328 Multiple Vulnerabilities

According to its version, the Trend Micro Control Manager application installed on the remote Windows host is 6.x prior to 6.0 SP 3 Hotfix 3328 6.0.0.3328. It is, therefore, affected by the following vulnerabilities : - A directory traversal vulnerability exists in the taskcontroller.php script d...

Cherry Music 0.35.1 - Arbitrary File Disclosure

Exploit for php platform in category web applications Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: email protected Vendor Homepage:...