5892 matches found
Arbitrary file existence disclosure in Action Pack
Specially crafted requests can be used to determine whether a file exists on the filesystem that is outside the Rails application's root directory. The files will not be served, but attackers can determine whether or not the file exists...
Enalean Tuleap 7.2 - XXE File Disclosure Vulnerability
Enalean Tuleap versions 7.2 and below suffer from an external XML entity injection vulnerability. Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported...
HttpCombiner ASP.NET - Remote File Disclosure Vulnerability
Exploit for asp platform in category web applications Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability Google Dork: filetype:txt intext:HttpCombiner.ashx Date: 2014-10-10 Exploit Author: Hoang Anh Thai Vendor Homepage:...
Enalean Tuleap 7.2 - XML External Entity File Disclosure
Enalean Tuleap 7.2 - XML External Entity File Disclosure Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported by: Jerzy Kramarz Details: A multiple XM...
HttpCombiner ASP.NET Remote File Disclosure Vulnerability
HttpCombiner ASP.NET is prone to remote file disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Enalean Tuleap 7.2 - XML External Entity File Disclosure
Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported by: Jerzy Kramarz Details: A multiple XML External Entity Injection has been found and confirmed...
Aerohive Hive Manager and Hive OS Multiple Vulnerabilities
, , . '.' '. ', . , '. , .', , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Aerohive Hive Manager and Hive OS Multiple Vulnerabilities Affected Versions: Aerohive Hive Manager Stand-alone and Cloud = 6.1R3 and HiveOS 6.1R3 PDF:...
[RT-SA-2014-008] Python CGIHTTPServer File Disclosure and Potential Code Execution
Advisory: Python CGIHTTPServer File Disclosure and Potential Code Execution The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary CGI scripts in the server's document root...
HttpCombiner ASP.NET - Remote File Disclosure
Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability Google Dork: filetype:txt intext:HttpCombiner.ashx Date: 2014-10-10 Exploit Author: Hoang Anh Thai Vendor Homepage: https://myfirstsamplepagebyilyasforassign.googlecode.com/files/HttpCombiner-v1.zip Reference:...
Novell GroupWise Admin Service FileUploadServlet Directory Traversal (CVE-2014-0600)
A directory traversal vulnerability exists within the Administration Service of Novell GroupWise 2014. The vulnerability is due to a flaw in handling of a parameter in the FileUploadServlet servlet. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to th...
WordPress Slider Revolution - Local File Disclosure
Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...
EGYWEB (Mantrac) <= Remote File Disclosure Exploit
database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...
Vtiger CRM <= 6.0.0 Arbitrary File Disclosure Vulnerability
Vtiger CRM is prone to an arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
openSUSE Security Update : python (openSUSE-SU-2014:1046-1)
This python update fixes the following security and non security issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - remove link count optimizations that are incorrect on btrfs and possibly other filesystems %NASLMINLEVEL 7030...
openSUSE Security Update : python3 (openSUSE-SU-2014:1042-1)
This python3 update fixes the following security and non security issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - fix importfailed hook file names %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...
openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advanced XML Reader 0.1.1 - XML External Entity (XXE) Data Parsing Arbitrary File Disclosure
The advanced-xml-reader WordPress plugin was affected by a XML External Entity XXE Data Parsing Arbitrary File Disclosure security vulnerability...