Proclaim File Download Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search, etc. Proclaim is used in one of the support for online learning and watch multimedia content components. A file download vulnerability exists in...

Kemana Directory Version 3.2 Build 20170903 Database Disclosure

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1-=-=-=-=-=-=-=-=-=-=-=-=- | Title : Kemana Directory Version 3.2 build 20170903 Database Disclosure Vulnerability | Author : indoushka | email : [email protected] | vendor : http://www.c97.net/ | Tested on : windows 8....

PHP Web Stat 4.5.03 Database Disclosure

======================================================================== | Title : php web stat v4.5.03 Data Base Disclosure vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v4.5.03 | Vendor : http://wmscripti.com/ | Dork ...

CVE-2017-2605

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-1000362. Reason: This candidate is a duplicate of CVE-2017-1000362. A vendor reference identifier was mistakenly treated as a CVE ID. Notes: All CVE users should reference CVE-2017-1000362 instead of this candidate. All...

CVE-2017-1000362

The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINSHOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the...

CVE-2017-1000362

The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINSHOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the...

Backup Directory

A common practice when administering web applications is to create a copy/backup of a particular directory prior to making any modification. Another common practice is to add an extension or change the name of the original directory to signify that it is a backup examples include .bak, .orig,...

Download Manager 1.1 SQL Injection / Disclosure

| Title : Download Manager v1.1 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Running on Download Manager v1.1 | Tested on: windows 8.1 Français V.Pro | Download : http://marketplace.mattlowden.com/php/download-manager/ ======================================...

Vicwor 视频播客系统数据库下载

谷歌搜索：Powered by Vicworl 该系统是通过安装布置的，所以都是统一的配置方式。 win+apache 我们知道win+apache有个缺陷就是可以通过短文件名访问文件。该系统的数据库备份文件在 data/backup/ 目录下而且文件名的长度大于9个字符.所以通过短文件名，访问数据库备份文件，导致数据库被下载。 利用方式：http://url/data/backup/VICWOR1.SQL...

Barracuda Spam Firewall 3.3.x preview_email.cgi file Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/19276/info Spam Firewall is prone to multiple vulnerabilities, including a directory-traversal issue, access-validation issue, and a remote command-execution issue. A remote attacker can exploit these issues to gain acces...

Directory traversal

The System Utilities sysutils extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."...

rsync excluded content access restrictions bypass via symlinks

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

Windows Gather Apple iOS MobileSync Backup File Collection

This module will collect sensitive files from any on-disk iOS device backups This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'English' class MetasploitModule 'Windows Gather Apple iOS MobileSync Backup File...

DirectAdmin 0day-vulnerability warning-the black bar safety net

Generally LINUX is a virtual host, it is difficult to mention the right, it is difficult to rebound. MSF and PHP that vulnerability is the exception. It may not be. If there is a management platform DirectAdmin Then you can be successful The default login address http://ip:2222/ In LINUX under...

Privilege escalation vulnerability when administrator access is compromised

panel:borderColor=ff0000|borderStyle=solid|bgColor=ffccccNote: This issue is superceded by JRA-21004. Please install the patches on that issue, rather than this one. For more details, see JIRA Security Advisory -...

CVE-2009-0571

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

The new network Union television system vulnerabilities-vulnerability warning-the black bar safety net

Today idle with nothing to do, went to the web to download Hu GE parodied the gold armor on the curse of the full overtime Group on the view. Inadvertently found that the station's software leaderboard on the new affiliate video system v2. 0 popularity index is quite high, so I just put this syst...

Barracuda Arbitrary File Disclosure + Command Execution

Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall Update: 07 August 2006 Updated by: PATz...

Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)

No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall...