PT-2022-9261 · Ovarro · Ovarro Tbox

Name of the Vulnerable Software and Affected Versions: Ovarro TBox affected versions not specified Description: The issue allows attackers to read, alter, or delete the configuration file through Ovarro TBox proprietary Modbus file access functions. Recommendations: At the moment, there is no...

CVE-2018-10729

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user...

RHEL 7 : heketi (RHSA-2017:3481)

An update for heketi is now available for Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Belden Hirschmann GECKO Server-Side Request Forgery Vulnerability

The Belden Hirschmann GECKO is the lean managed industrial Ethernet switch. A server-side request forgery vulnerability exists in the Belden Hirschmann GECKO switch. The vulnerability stems from the program failing to adequately validate requests. An attacker could exploit the vulnerability by...

Trane Tracer SC Information Disclosure Vulnerability

The Trane Tracer SC is an intelligent control panel from Trane USA that communicates with HVAC equipment controllers. A security vulnerability exists in the web server in Trane Tracer SC 4.2.1134 and earlier versions. A remote attacker could exploit the vulnerability by sending a direct request t...

SeaWell Networks Spectrum SDC 02.05.00 Traversal / Privilege Escalation

Exploit Title: SeaWell Networks Spectrum - Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: http://www.seawellnetworks.com/spectrum/ Versions Reported: Spectrum SDC 02.05.00, Build 02.05.00.0016 CVE-ID: CVE-2015-8282 CVE-2015-8283 CVE-2015-8284 About SeaWell Networks Spectru...

用友某系统通用漏洞涉及多家银行、证券、能源行业、企业

简要描述： 用友某系统通用漏洞可以读取配置文件 详细说明： 用友某系统通用漏洞涉及多家银行、证券、能源行业、企业 测试了部分网站，还有大量的网站存在此漏洞 http://zhaopin.cnooc.com.cn/hrss/dorado/smartweb2.RPC.d?rpc=true http://nc.hbny.com.cn:9090/hrss/dorado/smartweb2.RPC.d?rpc=true http://59.173.0.46:8070/hrss/dorado/smartweb2.RPC.d?rpc=true...

WordPress mTheme-Unus Local File Inclusion

Exploit Title: Wordpress themes mTheme-Unus LFI Vulnerability Date: 2015-09-27 Exploit Author: FullSecurity.org Google Dork: ilnurl:/wp-content/themes/mTheme-Unus/ Vendor Homepage: https://wordpress.org/ Tested on : Kali Linux Description : Wordpress Themes mTheme-Unus not filtering data so we ca...

Hard-Coded FTP Credentials Found in Schneider Electric SCADA Gateway

The parade of easily exploitable, critical vulnerabilities in ICS software shows no signs of ending anytime soon, with the latest entrant being two flaws in Schneider Electric’s ETG3000 FactoryCast HMI Gateway that allow unauthenticated remote access to the device’s FTP server and configuration...

PT-2013-46: Local File Include in Nagios Looking Glass

The specialists of the Positive Research center have detected a Local File Include vulnerability in Nagios Looking Glass. Application don't validates input data. That allows attackers to read config file. To exploit this vulnerability remote attacker shouldn't have privileges in Nagios Looking...

Linksys EA2700 arbitrary file traversal vulnerability-vulnerability warning-the black bar safety net

Brief description: This router software has never carried out security penetration testing, in the not logged in case you can easily get the router/etc/passwd file or other configuration file. Detailed description: This router software has never carried out security penetration testing, in the no...

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...

CVE-2011-3339

Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...

Belkin Wireless G Plus MIMO Router F5D9230-4 Auth Bypass Vulnerability

Exploit for hardware platform in category remote exploits ====================================================================== Belkin Wireless G Plus MIMO Router F5D9230-4 Auth Bypass Vulnerability ====================================================================== VULNERABILITY: Belkin...

PT-2007-1565 · Freeradius · Freeradius

Name of the Vulnerable Software and Affected Versions: FreeRadius versions 1.1.3 and earlier Description: A buffer overflow issue in the SMB Connect Server function allows attackers to execute arbitrary code related to the desthost field of an SMB Handle Type instance. The impact of this issue ha...

PT-2006-4361 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL versions prior to 5.0.23 MySQL versions prior to 5.1.12 Description: The issue is related to an off-by-one buffer overflow in the Instance options::complete initialization function in instance options.cc in the Instance Manager. This...

gigafast.txt

This router is/was widely sold in CompUSA stores. It is a Gigafast router, re-branded as a CompUSA router. All firmware versions are affected. When reported to the manufacturer on 5/13/04, I had received a response stating that the information would be passed on to firmware developer. Almost a ye...

zhcon privilege escalation

Configuration file is accesses with escalated privileges...

QwikiWiki - Directory Traversal

REQUEST: http://SERVER/qwiki/index.php?page=../config.php%00 milw0rm.com 2005-01-04...

CVE-2004-2610

mntdmount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed...