ZineBasic 1.1 - Arbitrary File Disclosure

ZineBasic 1.1 - Arbitrary File Disclosure Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

Cherry Music 0.35.1 Arbitrary File Disclosure

Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage: http://www.fomori.org/cherrymusic/index.html Software Link:...

libarchive: Unclear crashes in ZIP parser

A vulnerability was found in libarchive. A specially crafted ZIP file could cause a few bytes of application memory in a 256-byte region to be disclosed...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

WordPress RB Agency Plugin Local File Disclosure Vulnerability

WordPress RB Agency Plugin is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress RB Agency 2.4.7 Plugin - Local File Disclosure

Exploit for php platform in category web applications Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is...

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is...

WordPress CYSTEME Finder plugin arbitrary file disclosure+upload vulnerability

No description provided by source...

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure

Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is /ext/forcedownload.php...

WordPress RB Agency 2.4.7 File Disclosure

Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is /ext/forcedownload.php...

WordPress RB Agency Plugin 2.4.7 - Local File Disclosure

A Local File Disclosure vulnerability was found in WordPress RB Agency 2.4.7. It allows remote attackers to see the path to the webroot/file. Solution Update RB Agency Plugin to the latest version...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure

Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR allows an unauthenticated user through the browser sends a request to obtain a user name and password Requesting links is as follows: http://host:port/cgi-bin/readfile.cgi?query=ADMINID Return information example: var AdmID="admin"; var...

PLC Wireless Router GPN2.4P21-C-CN File Disclosure

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure

Exploit for cgi platform in category web applications Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

VideoIQ Camera File Disclosure

File disclosure vulnerability in VideoIQ Camera Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Vanderbilt IP-Camera File Disclosure

File disclosure vulnerability in Vanderbilt IP-Camera Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File DisclosureArbitrary File Upload

WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File DisclosureArbitrary File Upload Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload Link: https://wordpress.org/plugins/cysteme-finder/ Version: 1.3 Date: August 23rd 2016 Exploit Author: T0w3ntu...

WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File Disclosure/Arbitrary File Upload

Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload Link: https://wordpress.org/plugins/cysteme-finder/ Version: 1.3 Date: August 23rd 2016 Exploit Author: T0w3ntum Author Website: t0w3ntum.com SUMMARY CYSTEME Finder is an admin file manager plugin...

NUUO NVRmini 2 <= 3.0.8 LFI Vulnerability - Active Check

NUUO NVRmini 2 devices are prone to a local file disclosure LFI vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...