phpFileManager 0.9.8 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

phpFileManager 0.9.8 - Cross-Site Request Forgery

Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link: phpfm.sourceforge.net Version: 0.9.8 Tested on: windows 7 SP1...

Apple OSX 10.10.4 DYLD_PRINT_TO_FILE Privilege Escalation Exploit

In Apple OS X 10.10.4 and prior, the DYLDPRINTTOFILE environment variable is used for redirecting logging data to a file instead of stderr. Due to a design error, this feature can be abused by a local attacker to write arbitrary files as root via restricted, SUID-root binaries. This module requir...

LXC Directory Traversal Vulnerability

LXC is a user-space interface to the Linux kernel's container functionality that makes it easy for Linux users to create and manage system or application containers through a powerful API and simple tools. A local directory traversal vulnerability exists in LXC, which allows a local attacker to...

Directory traversal

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition AVE 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters...

CVE-2015-4527

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition AVE 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters...

Apple OS X DYLD_PRINT_TO_FILE Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Apple OS X DYLDPRINTTOFILE Privilege Escalation', 'Description' = %q In Apple OS X 10.10.4 and prior, the DYLDPRINTTOFILE environmen...

CVE-2015-1331

lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/...

Kaseya Virtual System Administrator Directory Traversal Vulnerability

Kaseya Virtual System Administrator VSA is a suite of IT system management platforms for simplifying and automating IT services from Kaseya, Switzerland. A directory traversal vulnerability exists in Kaseya VSA. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP...

OpenJDK Insecure Temporary File Handling Vulnerability

OpenJDK is the Java Platform, Standard Edition and related projects of the open source implementation of the collaborative platform . OpenJDK suffers from an insecure hsperfdata temporary file handling issue, the exploitation of which could allow an attacker to conduct a symbolic link attack to...

Apple OS X DYLD_PRINT_TO_FILE Privilege Escalation

In Apple OS X 10.10.4 and prior, the DYLDPRINTTOFILE environment variable is used for redirecting logging data to a file instead of stderr. Due to a design error, this feature can be abused by a local attacker to write arbitrary files as root via restricted, SUID-root binaries. Module Options msf...

Directory traversal

Directory traversal vulnerability in Kaseya Virtual System Administrator VSA 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request...

Directory traversal

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

CVE-2015-2971

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

Samsung SyncThru UpdateDriverFileServlet Directory Traversal Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Samsung SyncThru. By default, authentication is not required to exploit this vulnerability. The specific flaw exists within the DriverFileUploadServlet servlet exposed by upload/updateDriver. The...

Code injection

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...

CVE-2015-2970

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...

Mozilla Firefox Multiple Security Bypass Vulnerability (Jul 2015) - Mac OS X

Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Wesnoth Information Disclosure Vulnerability (CNVD-2015-04466)

Wesnoth is an open source wargame. An information disclosure vulnerability exists in Wesnoth, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit this vulnerability to gain access to sensitive information stored in arbitrary files...

WordPress Easy2Map plugin directory traversal vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. easy2Map is one of the plug-ins to support the creation of customized Google maps . A directory traversal...