PT-2015-6348

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.36 Description The issue allows remote attackers to enumerate directories by providing a full path in the folder parameter to "minibrowser.php" API endpoint. Recommendations For versions prior to...

TikiWiki Project 1.8 tiki-map.phtml Traversal Arbitrary File / Directory Enumeration

No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...

Mail.ru: Перечисление каталогов за счёт уязвимости в IIS

Приветствую! Сервер с багой : game1.bb.mail.ru Можно попытаться перебирать каталоги за счёт уязвимости в IIS. PoC game1.bb.mail.ru/images/1/a.aspx?aspxerrorpath=/ game1.bb.mail.ru/images/2/a.aspx?aspxerrorpath=/ Можно запустить сканнер и пофаззить эту багу более конкретно...

Windows Gather Active Directory Service Principal Names

This module will enumerate servicePrincipalName in the default AD directory where the user is a member of the Domain Admins group. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather...

Command injection

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

PT-2013-4355

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance affected versions not specified Description The issue allows remote attackers to enumerate directories and files by analyzing different responses to requests for arbitrary...

CVE-2013-3398: Exposure of Sensitive Information to an Unauthorized Actor

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

Cisco Unified MeetingPlace Directory Enumeration Information Disclosure Vulnerability

Cisco Unified MeetingPlace software contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information on a targeted system. The vulnerability is due to an unspecified error in the affected software that could allow an attacker to enumerate existing...

CVE-2011-4232

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070...

CVE-2011-4232

Cisco Unified MeetingPlace 6.1 and 8.5 contain a directory enumeration vulnerability where the web server returns different responses for directory queries depending on existence. This allows unauthenticated, remote attackers to enumerate directory names. The root cause is described as an unspeci...

CVE-2011-4232

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070...

CVE-2011-4232: Exposure of Sensitive Information to an Unauthorized Actor

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070...

PT-2012-1823

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace versions 6.1 through 8.5 Description The issue allows remote attackers to enumerate directory names via a series of queries to the web server. This is due to the web server producing different responses for directory...

CVE-2011-4894

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections...

Windows Gather Directory Permissions Enumeration

This module enumerates directories and lists the permissions set on found directories. Please note: if the PATH option isn't specified, then the module will start enumerate whatever is in the target machine's %PATH% variable. This module requires Metasploit: https://metasploit.com/download Curren...

Nmap NSE net: http-enum

Enumerates directories used by popular web applications and servers. This parses a fingerprint file that's formatted in a way that's compatible with the Nikto Web application scanner. This script, however, takes it one step further by building in advanced pattern matching as well as having the...

CVE-2009-1332

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...

CVE-2006-5725

The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories...

CVE-2006-5725

The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories...

Portcullis Security Advisory 05-006

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Directory & File Enumeration Via Reporting System Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: By...