131 matches found
CVE-2019-18867
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/...
Design/Logic Flaw
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/...
Informatica: XXE through injection of a payload in the XMP metadata of a JPEG file
Users are able to change their avatar picture. The avatar picture upload functionality is prone to a XXE attack when parsing the image file. Specifically, the XXE attack is executed through the injection of a payload in the "XMP metadata" of the uploaded JPEG file. Proof of concept note the "Burp...
Node.js third-party modules: [glance] Access unlisted internal files/folders revealing sensitive information
I would like to report sensitive information disclosure in glance. Similar to 486933 in ways Module module name: glance version: 3.0.5 npm page: https://www.npmjs.com/package/glance Module Description a quick disposable http server for static files Module Stats weekly downloads 41 Vulnerability...
Node.js third-party modules: [serve] Directory listing and File access even when they have been set to be ignored.
Module: - Name: serve - Version: latest 6.4.9 - Link: https://www.npmjs.com/package/serve Description: The serve modules allows directory browsing and to serve static files through the browser. The config option ignore can be used to tell the module which file or directory are forbidden and shoul...
Blender Directory Browsing Thumbnail Viewer Integer Overflow Vulnerability
Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Directory...
Nextcloud: Information Exposure Through Directory Listing
Hello. I found open directories on the site https://apps.nextcloud.com, which can be viewed by any unauthorized user. There is an error at https://apps.nextcloud.com/static/. F212856 All directories and files in them, starting with /static/ can be viewed or downloaded with all the content. Perhap...
CVE-2016-10140
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCT...
Gratipay: don't allow directory browsing on grtp.co
Hello guys, Details: The web server is configured to display the list of files contained in this directory. As a result of a misconfiguration - end user / attacker able to see content of the folders with systemically important files According to yours Scope any other software we publish - I found...
AjaxExplorer 1.10.3.2 - Multiple Vulnerabilities
Exploit for php platform in category web applications + Credits: hyp3rlinx + ISR: apparitionsec Vendor: ========== sourceforge.net smsid download linx: sourceforge.net/projects/ajax-explorer/files/ Product: ======================= AjaxExplorer v1.10.3.2 Manage server files through simple windows...
Paragon Initiative Enterprises: file full path discloser.
Hi, Paragonie security team i found one directory browsing vulnerability in php-encryption-master where the user input will not been filtered from any security layer. let me show you. there is a autoload.php page in the php-encryption-master. where the input src will b used to browse the director...
Directory Browsing Enabled on /cgi-bin (deprecated)
The /cgi-bin directory on the remote web server is browsable. An unauthenticated, remote attacker can exploit this to disclose sensitive information. This plugin has been deprecated. Use webmirror3.nbin plugin ID 10662 instead to identify browsable directories. %NASLMINLEVEL 999999 C Tenable...
Netsweeper 4.0.8 - Multiple Vulnerabilities
Exploit for php platform in category web applications +---------------------------------------------------+ + Netsweeper 4.0.8 - Cross Site Scripting Injection + +---------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com/ Version : 4.0....
MinaliC Webserver 2.0 - Remote Source Disclosure
No description provided by source. Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
No description provided by source. Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004...
DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities
Title ----- DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities Severity -------- High Date Discovered --------------- March 19, 2013 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Dennis Lavrinenko, Bobby Lockett, and r@b13$ 1. Actuate...
W3 Total Cache Plugin for WordPress Cache File Direct Request Information Disclosure
The W3 Total Cache Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability because it stores cache files in a publicly accessible directory. If directory browsing is enabled on a web server, an attacker can browse to /wp-content/w3tc/dbcache and...
Bugzilla < 3.6.11 / 4.0.8 / 4.2.3 / 4.3.3 Multiple Vulnerabilities
According to its banner, the version of Bugzilla installed on the remote host is affected by multiple vulnerabilities : - When the user logs in using LDAP, the username is not escaped when building the uid=$username filter which is used to query the LDAP directory. This could potentially lead to...
FreeBSD : bugzilla -- multiple vulnerabilities (6ad18fe5-f469-11e1-920d-20cf30e32f6d)
A Bugzilla Security Advisory reports : The following security issues have been discovered in Bugzilla : LDAP Injection When the user logs in using LDAP, the username is not escaped when building the uid=$username filter which is used to query the LDAP directory. This could potentially lead to LDA...
Security advisory for Bugzilla 4.3.3, 4.2.3, 4.0.8 and 3.6.11
Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: When the user logs in using LDAP, the username is not escaped before being passed to LDAP which could potentially lead to LDAP...