Horos 2.1.0 Web Portal - Directory Traversal Vulnerability

Exploit for macOS platform in category remote exploits Horos 2.1.0 Web Portal Remote Information Disclosure Exploit Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: Horos™ is an open-source, free medical image viewer. The goal of the Horos...

Horos 2.1.0 Web Portal - Directory Traversal

Horos 2.1.0 Web Portal Remote Information Disclosure Exploit Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: Horos™ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical...

Horos 2.1.0 Web Portal Remote Information Disclosure / Directory Traversal

Horos 2.1.0 Web Portal Remote Information Disclosure Exploit Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: HorosaC/ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical...

CVE-2016-6852

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware...

chromium-browser: local file disclosure in devtools

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...

Google Chrome Local File Disclosure Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit the vulnerability to download arbitrary files...

Microsoft PowerShell - XML External Entity Injection

Microsoft PowerShell - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-POWERSHELL-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product:...

Shuttle Tech ADSL Wireless 920 WM XSS / Directory Traversal

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Cross Site Scripting Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Microsoft Excel Starter 2010 XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel Starter 2010 EXCELC.EXE / "OFFICEVIRT.EXE" This is a bundled Excel "starter" version that comes 'pre-loaded'...

Microsoft Excel Starter 2010 - XML External Entity Injection

Microsoft Excel Starter 2010 - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-STARTER-XXE-REMOTE-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: =================...

SonicWALL Global Management System File Disclosure

File disclosure vulnerability in SonicWALL Global Management System GMC service Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application or system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...

TYPO3 'API method' Directory Traversal Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A directory traversal vulnerability exists in the TYPO3 'API method', which can be exploited by an attacker by sending a UTL request containing a directory traversal sequence '...

SAP NetWeaver AS JAVA 7.5 Directory Traversal Vulnerability

SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from a directory traversal vulnerability. Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 to 7.5 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 04.12.2015 Reported: 05.12.2015 Vendor response:...

Barco ClickShare Arbitrary File Disclosure Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. An arbitrary file disclosure vulnerability exists in Barco ClickShare because it does not adequately validate user-supplied input. An attacker...

NETGEAR ADSL Router JNR2010 Module Remote File Disclosure Vulnerability

The NETGEAR ADSL Router is a router product from the American company NetGear. A remote file disclosure vulnerability exists in NETGEAR ADSL Router JNR2010 version 1.0.0.20. Due to the program failing to adequately validate user-supplied input. An attacker could exploit the vulnerability to view...

DLink ADSL Router DSL-2750E SEA_1.07 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.07 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

NETGEAR ADSL Router JNR1010 1.0.0.32 Authenticated Remote File Disclosure

!/bin/sh NETGEAR ADSL ROUTER JNR1010 1.0.0.32 Authenticated Remote File Disclosure Hardware Version: JNR1010 Firmware Version: 1.0.0.32 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational...