Lucene search
+L

7576 matches found

Exploit DB
Exploit DB
•added 2017/02/12 12:00 a.m.•57 views

Kodi 17.1 - Arbitrary File Disclosure

Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux Kodi formerly XBMC is a free and open-source media...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/02/12 12:00 a.m.•42 views

Kodi 17.1 - Arbitrary File Disclosure

Kodi 17.1 - Arbitrary File Disclosure Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux Kodi formerly...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2017/02/08 12:00 a.m.•18 views

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2017-01311)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.5. An attacker can exploit...

6.5CVSS6.6AI score0.01167EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2017/02/07 12:00 a.m.•29 views

Responsive Filemanger 9.11.0 - Arbitrary File Disclosure

Responsive Filemanger 9.11.0 - Arbitrary File Disclosure + Exploit Title: Responsive Filemanger = 9.11.0 - Arbitrary File Disclosure/Deletion + Date: 7 Feb 2017 + Vulnerability and Exploit Author: Wiswat Aswamenakul + Vendor Homepage: http://www.responsivefilemanager.com/ + Affected version: only...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2017/02/07 12:00 a.m.•49 views

Responsive Filemanager 9.11.0 Arbitrary File Disclosure

Exploit Title: Responsive Filemanger = 9.11.0 - Arbitrary File Disclosure/Deletion + Date: 7 Feb 2017 + Vulnerability and Exploit Author: Wiswat Aswamenakul + Vendor Homepage: http://www.responsivefilemanager.com/ + Affected version: only tested on 9.11.0 and 9.7.3 other versions might be...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/02/07 12:00 a.m.•47 views

Responsive Filemanger <= 9.11.0 - Arbitrary File Disclosure

Exploit Title: Responsive Filemanger = 9.11.0 - Arbitrary File Disclosure/Deletion + Date: 7 Feb 2017 + Vulnerability and Exploit Author: Wiswat Aswamenakul + Vendor Homepage: http://www.responsivefilemanager.com/ + Affected version: only tested on 9.11.0 and 9.7.3 other versions might be...

5.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/02/07 12:00 a.m.•47 views

Debian DLA-817-1 : libphp-phpmailer security update

It was discovered that there was a local file disclosure vulnerability in libphp-phpmailer, a email transfer class for PHP, where insufficient parsing of HTML messages could potentially be used by attacker to read a local file. For Debian 7 'Wheezy', this issue has been fixed in libphp-phpmailer...

5.5CVSS6.2AI score0.02143EPSS
SaveExploits6References3
osv_cve
osv_cve
•added 2017/02/06 5:59 p.m.•31 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS6.1AI score
SaveExploits0References4
NVD
NVD
•added 2017/02/06 5:59 p.m.•27 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS5.1AI score0.00451EPSS
SaveExploits2References4
Prion
Prion
•added 2017/02/06 5:59 p.m.•24 views

Arbitrary file deletion

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

2.1CVSS5.2AI score0.00451EPSS
SaveExploits2References4Affected Software1
UbuntuCve
UbuntuCve
•added 2017/02/06 5:59 p.m.•33 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS6.4AI score0.00451EPSS
SaveExploits2References5
osv_ubuntu
osv_ubuntu
•added 2017/02/06 5:59 p.m.•12 views

UBUNTU-CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS6.4AI score0.00451EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2017/02/06 5:00 p.m.•52 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.3AI score0.00451EPSS
SaveExploits2References4
AlpineLinux
AlpineLinux
•added 2017/02/06 5:00 p.m.•91 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS5.5AI score0.00451EPSS
SaveExploits2
CVE
CVE
•added 2017/02/06 5:00 p.m.•126 views

CVE-2017-5595

CVE-2017-5595 affects ZoneMinder 1.x up to v1.30.0, enabling an authenticated attacker to read local files (e.g., /etc/passwd) via web/views/file.php due to unfiltered input passed to readfile(); the attack uses a .. in the path parameter zm/index.php?view=file&path=. Connected advisories confirm...

5.5CVSS5.2AI score0.00451EPSS
SaveExploits2References4Affected Software1
Mend
Mend
•added 2017/02/06 5:00 p.m.•6 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

6.8CVSS0.00451EPSS
SaveExploits2References5
Debian CVE
Debian CVE
•added 2017/02/06 5:00 p.m.•88 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS3AI score0.00451EPSS
SaveExploits2
Debian
Debian
•added 2017/02/06 9:00 a.m.•150 views

[SECURITY] [DLA 817-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1.3+deb7u1 CVE ID : CVE-2017-5223 Debian Bug : 853232 It was discovered that there was a local file disclosure vulnerability in libphp-phpmailer, a email transfer class for PHP, where insufficient parsing of HTML messages could potentially be used by...

5.5CVSS6.3AI score0.02143EPSS
SaveExploits6
Packet Storm
Packet Storm
•added 2017/02/06 12:00 a.m.•970 views

ZoneMinder XSS / CSRF / File Disclosure / Authentication Bypass

========================================================================== Product: ZoneMinder Versions: Multiple versions - see inline Vulnerabilities: File disclosure, XSS, CSRF, Auth bypass & Info disclosure CVE-IDs: CVE-2017-5595, CVE-2017-5367, CVE-2017-5368, CVE-2016-10140 Author: John...

0.6AI score0.06558EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/06 12:00 a.m.•6 views

CVE-2017-5595: Exposure of Sensitive Information to an Unauthorized Actor

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS5.8AI score0.00451EPSS
SaveExploits2References2
Rows per page
Query Builder