7501 matches found
CVE-2021-29006
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server...
CVE-2021-29006
CVE-2021-29006 affects rConfig 3.9.6. A local file disclosure vulnerability allows an authenticated user to download arbitrary server files. The connected Nuclei template confirms a Local File Disclosure/LFI issue with rConfig 3.9.6, including impact details (e.g., reading sensitive files such as...
PT-2021-18020
Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.6 Description: The issue allows an authenticated user to download any file on the server, due to a Local File Disclosure problem. Recommendations: For rConfig version 3.9.6, update to a version that fixes this issue, as th...
CVE-2021-29006: Improper Limitation of a Pathname to a Restricted Directory
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server...
Threat Advisory: Apache HTTP Server zero-day vulnerability opens door for attackers
A recently discovered vulnerability in Apache HTTP Server CVE-2021-41733 is being actively exploited in the wild. This vulnerability is a path traversal and file disclosure vulnerability that could allow an attacker to map URLs outside of the document root. It could also result in the exposure...
Mitigating CVE-2021-41773: Apache HTTP Server Path Traversal
On September 29, Ash Daulton, along with the cPanel Security Team, reported a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.29 to the Apache security team. The issue was fixed within two days, under CVE-2021-41773, and the patch was released on October 4. Apache urged...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 f...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 f...
CVE-2021-41770
PingFederate (Ping Identity) before version 10.3.1 is vulnerable to an XXE attack due to improper pre-parsing validation, potentially allowing XML file disclosure. Affected product: PingFederate. Root cause: mishandled pre-parsing validation. Impact: XML data disclosure. Remediation: upgrade to P...
CVE-2021-41770
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Playground === This is a small Docker recipe for...
Ping Identity PingFederate 代码问题漏洞
Ping Identity PingFederate is a flagship software-based federation server in the United States. used for identity management. A security vulnerability exists in Ping Identity PingFederate that stems from improper handling of pre-parsed validation, resulting in an XXE attack that can enable XML fi...
CVE-2021-41770: Improper Restriction of XML External Entity Reference
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure...