5837 matches found
Flickr: Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/upload
Summary: FFmpeg is a video and audio software that is used for generating previews and for converting videos. Your current installation allows HLS playlists that contain references to external files, which leads to local file disclosure. Steps to Reproduce: 1.Download the attached file. F413554...
DEBIAN-CVE-2019-6799
An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...
HOUSE GATE App for iOS vulnerable to directory traversal
Overview HOUSE GATE App for iOS provided by HOUSE GATE inc. uses the old version of cordova-plugin-ionic-webview, and inherits a directory traversal vulnerability CWE-22, CVE-2018-16202. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...
EulerOS Virtualization 2.5.1 : ghostscript (EulerOS-SA-2019-1016)
According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibl...
phpMyAdmin -- File disclosure and SQL injection
The phpMyAdmin development team reports: Summary Arbitrary file read vulnerability Description When AllowArbitraryServer configuration set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. phpMyadmin attempts to block...
Adminer 4.3.1 up to 4.6.2 File Disclosure Vulnerability - Windows
Adminer is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...
Adminer 4.3.1 - 4.6.2 File Disclosure Vulnerability - Linux
Adminer is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...
Across DR-810 ROM-0 Backup File Disclosure
Exploit Title: Across DR-810 ROM-0 Backup - File DisclosureSensitive Information Date: 2019-01-11 Exploit Author: SajjadBnd My Email: [email protected] Vendor Homepage: http://www.ac.i8i.ir/ Version: DR-810 Tested on: DR-810 RomPager/4.07 UPnP/1.0 + About ========== this hardware is a SIM card...
Across DR-810 ROM-0 - Backup File Disclosure
Across DR-810 ROM-0 - Backup File Disclosure Exploit Title: Across DR-810 ROM-0 Backup - File DisclosureSensitive Information Date: 2019-01-11 Exploit Author: SajjadBnd My Email: [email protected] Vendor Homepage: http://www.ac.i8i.ir/ Version: DR-810 Tested on: DR-810 RomPager/4.07 UPnP/1.0 +...
Sensitive File Disclosure
Binary data sensitivewebfiles.nbin...
EulerOS Virtualization 2.5.2 : ghostscript (EulerOS-SA-2018-1412)
According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibl...
Spring MVC File Disclosure
File disclosure vulnerability in Spring MVC on Windows Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Nutanix: Local file disclosure through SSRF at next.nutanix.com
Issue marked resolved and test fixed in January 2019...
I is how to pass the ASP Secrets read Get 1. 7 million USD reward-vulnerability warning-the black bar safety net
ASP. NET application in the more common vulnerability is a local file disclosure. If you have never develop or use such technology, then the LFD exploit can be very difficult, and no practical effect. In this article, I describe how to attack a presence in the LFD vulnerability of the application...
cordova-plugin-ionic-webview vulnerable to path traversal
Overview cordova-plugin-ionic-webview provided by npm, Inc. contains a path traversal vulnerability CWE-22 . This vulnerability was first reported to npm, Inc. by the below reporters then also reported to IPA. Based on the coordination request made by the reporters, JPCERT/CC coordinated with npm...
WordPress Total-Child-Theme-Master 1.0 Arbitrary File Disclosure
Exploit Title : WordPress Total-Child-Theme-Master Themes 1.0 Arbitrary File Download Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org wpexplorer-themes.com/total/docs/child-theme/ Software Download Link :...
WordPress NikolayDyankovDesign 2.0 Arbitrary File Disclosure
Exploit Title : WordPress NikolayDyankovDesign Themes 2.0 Arbitrary File Download Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : pinterest.com/nikolaydyankov/ nikolaydyankovdesign.com semsoft.ca Software Download Link : N/A Tested On ...
KPOT Botnet Arbitrary File Disclosure
Exploit Title: KPOT Botnet - File Download/Source Code Disclosure Vulnerability Google Dork: n/a Date: 26/11/2018 Exploit Author: n4pst3r Vendor Homepage: unkn0wn Software Link: https://bhf.io/threads/515432/ Version: unkn0wn Tested on: Windows 10, debian 7 CVE : n/a Vuln-Code: download.php PoC:...
WordPress hwm_board 1.0 Arbitrary File Disclosure
Exploit Title : WordPress hwmboard 1.0 Plugins Korea Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version Information : All Current...