eCan 1.0 File Disclosure

File disclosure vulnerability in eCan Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Flickr Carousel 1.0 File Disclosure

File disclosure vulnerability in Flickr Carousel Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Easy Contact Forms Exporter 1.1.0 File Disclosure

File disclosure vulnerability in WordPress Easy Contact Forms Exporter plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory XML file disclosure vulnerability via GETWRAPCFGC and GETWRAPCFGC2 system stored procedures. Risk Level: Medium Affected versions: IBM DB2 LUW 9.1, 9.5, 9.7, 10.1 Remote exploitable: No Credits: This...

JVN#42676559: Safari vulnerable to local file content disclosure

Safari contains a vulnerability where a local file may be accessed from remote, which may result in a local file content disclosure. Impact By opening a specially crafted HTML document as a local file, an arbitrary local file may be obtained from remote even though access from other users is...

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'fullscreen.php?albumid' SQL Injection

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

airVisionNVR 1.1.13 Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version: 1.1.13 Tested on: WinXP SP3 CVE: Possibl...

FileContral 1.0 File Disclosure / Local File Inclusion

------------------IN THE NAME OF GOD-------------------- Title : FileContral v1.0 By Leslee Mulitpe Vulnerabilities Author: Ashiyane Digital Security Team Dork : "intitle:FileContral v1.0 By Leslee" Exploit ----------------- 1 . Local File Inclusion...

CVE-2012-3489

The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...

CVE-2012-3489: Improper Restriction of XML External Entity Reference

The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...

Samsung Galaxy SII - Mdnie_Tune_Files_Root - Remote File Disclosure

Exploit for hardware platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

DEBIAN-CVE-2012-1103

emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message...

APPLE-SA-2012-09-19-3 Safari 6.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-3 Safari 6.0.1 Safari 6.0.1 is now available and addresses the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8 and v10.8.1 Impact: Opening a maliciously crafted downloaded HTML...