TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities

No description provided by source. Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities Author: SirGod Website: www.rstforums.com Vendor Homepage: http://www.trendnet.com/ Version: 1.00.23 1. Local file disclosure The router has the TFTP service enabled by default and it can be accessed...

WHMCompleteSolution 3.x/4.x Multiple Vulnerabilities

No description provided by source. $b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs |...

Accipiter DirectServer 6.0 - Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9389/info This vulnerability may allow and attacker to gain access to files that reside outside of the web root directory using a specially crafted URI that contains URL-encoded variations of directory traversal sequences...

CF Image Hosting Script 1.3.82 File Disclosure

No description provided by source. !/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor: http://www.phpkode.com Downloa...

Apache Tomcat 3/4 DefaultServlet File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5786/info The servlet 'org.apache.catalina.servlets.DefaultServlet' is included with Apache Tomcat by default. It is possible to use this servlet to view contents of files within the webroot. This includes JSP source code...

ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure Vulnerability

No description provided by source. Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named kerbynet interpreted in cgi-bin directory here : /cdrom/usr/local/apache2/cgi-bin/kerbynet So all...

Sahana 0.6.2 'mod' Parameter Local File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36826/info Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from...

DynMedia Pro Web CMS 4.0 - Local File Disclosure

No description provided by source. |||!===========================================================================! DynMedia Pro Web CMS 4.0 ||Local File Disclosure Exploit| | Author : MbahSemar [email protected] Homepage : http://www.indonesianhacker.or.id | http://suramcrew.org |...

MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7944/info The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readabl...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability

No description provided by source. Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File:...

JAWS 0.2/0.3 index.php gadget Parameter Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-sit...

Abyss Web Server 1.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4466/info Abyss Web Server is a freely available personal web server. It is maintained by Aprelium Technologies and runs on Microsoft Windows operating systems, as well as Linux. It is possible for a remote attacker to...

MLdonkey <= 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln

No description provided by source. MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually. Reference:...

Lc Flickr Carousel 1.0 - Local File Disclosure Vulnerability

No description provided by source. Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 ...

QNX RTOS 4.25 CRTTrap File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4901/info The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file. crttrap is installed setuid by default. crttrap Local attackers may specify an arbitrary system file in place of th...

MS Word 95/97/98/2000/2002 INCLUDEPICTURE Document Sharing File Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/5764/info The INCLUDEPICTURE Field Code may be used to insert arbitrary URLs into a document. The INCLUDEPICTURE Field Code is reported to, under some circumstances, present a security threat. If the INCLUDEPICTURE Field...

Apache Tomcat 3.x Null Byte Directory/File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6721/info Apache Tomcat is prone to a directory/file disclosure vulnerability when used with JDK 1.3.1 or earlier. It has been reported that remote attackers may view directory contents even when an 'index.html' or other...

GNUJSP 1.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4125/info GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems. It has been reported that...

nullam blog 0.1.2 (lfi/fd/sql/xss) Multiple Vulnerabilities

No description provided by source. -- Salvatore Fresta aka drosophila CWNP444351 Salvatore drosophila Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS +...

Logics Software LOG-FT Arbitrary File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an...