Cisco Unified Communications Manager File Disclosure Vulnerability

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A file disclosure vulnerability exists in Cisco Unified Communications Manager because it fails to adequately filter user-supplied input. An attacker could exploit this vulnerability to obtain...

SysAid < 14.4.2 Arbitrary File Disclosure Vulnerability

SysAid On-Premise is prone to an arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

嘉缘人才系统最新版注入（无视防御）

简要描述： rt 详细说明： 看到\member\personinterview.php if$do=='del' $checks=$POST'checks'; $db -query"delete from $cfg'tbpre'myinterview where ipmember='$username' and iid in $checks"; showmsg'删除成功！',"?m=personinterview&show=$show",0,2000;exit; 由上面的代码可以看出来，$checks直接进入了sql中，而且没有单引号。...

WordPress Slider Revolution Responsive File Disclosure

File disclosure vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Cart66 Pro <= 1.5.3 - Authenticated Arbitrary File Disclosure

Ability to change settings with a registered non-admin user allows us to trigger an Arbitrary File Disclosure vulnerability with any path of our choosing. One limitation with this vulnerability is that the target user in the PoC, ‘test’ needs to have an account on the Cart66 installation...

WordPress RevSlider Local File Disclosure

Exploit Title: Wordpress RevSlider Plugin LFD Google Dork: inurl:/admin-ajax.php?action=revslidershowimage Date: 12/29/14 Exploit Author: FarbodEZRaeL Vendor Homepage: iranhack.org Software Link: wordpress.org Tested on: windows Exploit: Exploits Wordpress...

VP-2014-004 SysAid Server Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: 14.4.2 Product Website: http://www.sysaid.com/product/sysaid Author: Bernhard...

WordPress Sell Downloads Plugin <= 1.0.1 - Arbitrary File Disclosure

Because of this vulnerability, attackers can download arbitrary files from site, under the context of the web server. Solution Upgrade the plugin...

WordPress Themes download.php File Disclosure

!/usr/bin/php -q ?php =============================================================================== NAME: Wordpress A.F.D Verification/ INURL - BRASIL TIPE: Arbitrary File Download Tested on: Linux EXECUTE: php exploit.php www.target.gov.us OUTPUT: WORDPRESAFD.txt AUTOR: Cleiton Pinheiro / NICK...

SysAid Server Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

AMSI 3.20.47 Build 37 File Disclosure

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / AMSI v3.20.47 build 37 = Remote File Disclosure Exploit .py My + Author : KnocKout Contact : [email protected] Exploit Developed by : B3mB4m HomePage :...

SysAid Server - Arbitrary File Disclosure

SysAid Server - Arbitrary File Disclosure Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable...

SysAid Server Arbitrary File Disclosure Vulnerability

SysAid Server is vulnerable to an unauthenticated file disclosure attack that allows an anonymous attacker to read arbitrary files on the system. An attacker exploiting this issue can compromise SysAid user accounts and gain access to important system files. When SysAid is configured to use LDAP...

SysAid Server - Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

VDG Security SENSE 2.3.13 File Disclosure / Bypass / Buffer Overflow

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: VDG Security SENSE formerly DIVA vulnerable version: 2.3.13 fixed version: unknown - no vendor confirmation impact: critical...

TYPO3 Translations.php File Disclosure Vulnerability

TYPO3 is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2014 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:typo3:typo3";...

Tiny HTTP Server <= 1.1.9 Path Traversal Vulnerability - Active Check

Tiny HTTP server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8009

CVE-2014-8009 affects Cisco Unified Computing System Manager (UCSM) up to version 2.1(3f). The issue is an information-disclosure vulnerability where remote, unauthenticated attackers can read log files to obtain sensitive system information. Exploitation details are not provided in the cited doc...

Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits !/usr/bin/perl -w Title : Tiny Server v1.1.9 Arbitrary File Disclosure Exploit Download : http://tinyserver.sourceforge.net/tinyserverfull.zip Author : ZoRLu Test : Windows7 Ultimate Date : 29/11/2014 BkiAdam : Dr.Ly0n, KnocKout, LifeSteaLe...

WordPress Plugin CodeArt Google MP3 Player - File Disclosure Download

Exploit Title: Wordpress CodeArt Google MP3 Player plugin - File Disclosure Download Google Dork: inurl:/wp-content/plugins/google-mp3-audio-player/directdownload.php?file= Date: 02/12/2014 Exploit Author: QK14 Team Vendor Homepage: https://wordpress.org/plugins/google-mp3-audio-player/ Software...