IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure

The IP Blacklist Cloud plugin exposes several AJAX functions to users. One of these is the ‘importCSVIPCloud’ action, which looks to be used to import CSV files into the systems blacklist. This action is susceptible to Directory Traversal, and does not check file extensions, as such it is possibl...

WordPress IP Blacklist Cloud Plugin <= 3.42 - Arbitrary File Disclosure

This plugin is prone to an arbitrary file disclosure vulnerability. It allows an user with adequate access to the WordPress instance to read files on the system and potentially compromising further credentials such as FTP, MySQL, amongst other sensitive information. Solution Upgrade the plugin...

Codiad 2.5.3 Local File Inclusion

+Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP ////////////////////////////////////////////////////////////////// // Run Download...

Codiad 2.5.3 - Local File Inclusion

Codiad 2.5.3 - Local File Inclusion +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

RESTeasy: External entities expanded by DocumentProvider

It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessibl...

[RT-SA-2014-016] Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

Cisco Unified Communications Manager Real-Time Monitoring Tool File Disclosure Vulnerability

A vulnerability in the application programming interface API that supports the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access the contents of arbitrary files on an affected device. The vulnerability is due to a failur...

Hybris Commerce Software Suite 5.x File Disclosure / Traversal Vulnerabilities

Various Hybris Commerce Software Suite 5.x suffer from a directory traversal vulnerability that allows for arbitrary file disclosure. Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal...

Hybris Commerce Software Suite 5.x File Disclosure / Traversal

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

RESTEasy: XXE via parameter entities

It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible...

Fedora 20 : rubygem-sprockets-2.8.2-5.fc20 (2014-15489)

Contains fix for CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

LG DVR LE6016D File Disclosure

---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

LG DVR LE6016D - Remote File Disclosure Vulnerability

Exploit for hardware platform in category web applications ---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Usage Info python exploit.py http://127.0.0.1:80 flag.txt -- coding: utf-8 -- import urllib2 import sys Tiny Server v1.1.9 Arbitrary File Disclosure Exploit def banner: print "\0331m\03392mTiny Server v1.1.9 Arbitrary File Disclosure Exploit" print "Exploit Write by Yahya Tanisik" print "Contact ...

LG DVR LE6016D - Remote File Disclosure

LG DVR LE6016D - Remote File Disclosure ---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

LG DVR LE6016D - Remote File Disclosure

---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

FortiAuthenticator v300 build 0007 Multiple Vulnerabilities

Fortinet FortiAuthenticator suffers from subshell bypass, cross site scripting, password disclosure, and file disclosure vulnerabilities. Fortinet FortiAuthenticator Multiple Vulnerabilities Affected Versions: Verified on FortiAuthenticator v300 build 0007 +-------------+ | Description |...

RedSteel Theme - File Disclosure

Description The RedSteel WordPress theme was affected by a File Disclosure security vulnerability...

WordPress RedSteel Theme - File Disclosure Vulnerability

This theme is prone to a file disclosure vulnerability via "download.php" file. Solution Update the theme...

PicketLink: XXE via insecure DocumentBuilderFactory usage

It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the...