Omni-Secure 5 / 6 / 7 Remote File Disclosure

Remote File Discloure "Omni-secure" version 5 / 6 / 7 Viva Egypt & Grief and sorrow for the disaster Assiut, fUCK U QANDIL Greetz to : EL MOGHAZY & EL Mery Author:Mohamed Gaber "HackerEgy in the paste : " email :[email protected] Script : omni-secure version 5/6/7 Price :$197 Url:...

Omni-Secure - 'dir' Multiple File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56575/info Omni-Secure is prone to multiple file-disclosure vulnerabilities. An attacker can exploit these issues to view local files in the context of the web server process. This may aid in further attacks. Versions Omni-Secure 5, 6 and 7 are vulnerable...

eCan 1.0 File Disclosure

File disclosure vulnerability in eCan Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Flickr Carousel 1.0 File Disclosure

File disclosure vulnerability in Flickr Carousel Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Easy Contact Forms Exporter 1.1.0 File Disclosure

File disclosure vulnerability in WordPress Easy Contact Forms Exporter plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

House Style 0.1.2 File Disclosure

File disclosure vulnerability in House Style Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory XML file disclosure vulnerability via GETWRAPCFGC and GETWRAPCFGC2 system stored procedures. Risk Level: Medium Affected versions: IBM DB2 LUW 9.1, 9.5, 9.7, 10.1 Remote exploitable: No Credits: This...

JVN#42676559: Safari vulnerable to local file content disclosure

Safari contains a vulnerability where a local file may be accessed from remote, which may result in a local file content disclosure. Impact By opening a specially crafted HTML document as a local file, an arbitrary local file may be obtained from remote even though access from other users is...

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'fullscreen.php?albumid' SQL Injection

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

airVisionNVR 1.1.13 Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version: 1.1.13 Tested on: WinXP SP3 CVE: Possibl...

FileContral 1.0 File Disclosure / Local File Inclusion

------------------IN THE NAME OF GOD-------------------- Title : FileContral v1.0 By Leslee Mulitpe Vulnerabilities Author: Ashiyane Digital Security Team Dork : "intitle:FileContral v1.0 By Leslee" Exploit ----------------- 1 . Local File Inclusion...

CVE-2012-3489

The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...

CVE-2012-3489: Improper Restriction of XML External Entity Reference

The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...