WordPress Slider Revolution - Local File Disclosure

Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Vtiger CRM <= 6.0.0 Arbitrary File Disclosure Vulnerability

Vtiger CRM is prone to an arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : python3 (openSUSE-SU-2014:1042-1)

This python3 update fixes the following security and non security issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - fix importfailed hook file names %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

openSUSE Security Update : python (openSUSE-SU-2014:1046-1)

This python update fixes the following security and non security issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - remove link count optimizations that are incorrect on btrfs and possibly other filesystems %NASLMINLEVEL 7030...

openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ppc64-diag (openSUSE-SU-2014:0953-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advanced XML Reader 0.1.1 - XML External Entity (XXE) Data Parsing Arbitrary File Disclosure

The advanced-xml-reader WordPress plugin was affected by a XML External Entity XXE Data Parsing Arbitrary File Disclosure security vulnerability...

Download Shortcode - "file" Arbitrary File Disclosure

The download-shortcode WordPress plugin was affected by a "file" Arbitrary File Disclosure security vulnerability...

Filedownload 0.1 - (download.php) Remote File Disclosure

The filedownload WordPress plugin was affected by a download.php Remote File Disclosure security vulnerability...

Zingiri Tickets - File Disclosure

The zingiri-tickets WordPress plugin was affected by a File Disclosure security vulnerability...

Simple Download Button Shortcode 1.0 - Remote File Disclosure

The simple-download-button-shortcode WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Plugin Newsletter 1.5 - Remote File Disclosure

The plugin-newsletter WordPress plugin was affected by a Remote File Disclosure security vulnerability...

PICA Photo Gallery - Remote File Disclosure

The pica-photo-gallery WordPress plugin was affected by a Remote File Disclosure security vulnerability...

UnGallery <= 1.5.8 - Local File Disclosure

The UnGallery WordPress plugin was affected by a Local File Disclosure security vulnerability...

Tera Charts 0.1 - Unauthenticated Remote Path Traversal File Disclosure

The tera-charts WordPress plugin was affected by an Unauthenticated Remote Path Traversal File Disclosure security vulnerability. PoC http://www.example.com/wp-content/plugins/tera-charts/charts/treemap.php?fn=../../../../wp-config.php...

PictPress <= 0.91 - Remote File Disclosure

The pictpress WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Tera Charts 0.1 - Unauthenticated Remote Path Traversal File Disclosure

The tera-charts WordPress plugin was affected by an Unauthenticated Remote Path Traversal File Disclosure security vulnerability. http://www.example.com/wp-content/plugins/tera-charts/charts/treemap.php?fn=../../../../wp-config.php...

WordPress SCv1 Theme - Local File Disclosure

Estrutura Basica themes are prone to a local file disclosure vulnerability via the "file" parameter. Solution Update the theme...

ppc64-diag: fix for tmp races and information disclosure (important)

ppc64-diag was updated to fix tmp race issues CVE-2014-4038 and a file disclosure problem in snapshot tarball generation CVE-2014-4039...