6571 matches found
WordPress dl-skin.php Arbitrary File Download
An arbitrary file download vulnerability exists in dl-skin.php file. A remote attacker might gain access to arbitrary files using a specially crafted HTTP request...
Traps Endpoint Server Management Core Arbitrary File Download Vulnerability
Palo Alto Networks Traps Endpoint Server Management Core is a suite of server endpoint management core software from Palo Alto Networks, USA. An arbitrary file download vulnerability exists in Traps Endpoint Server Management Core 3.3.3 and earlier versions, which could be exploited by an attacke...
WordPress Bonkersbeat-theme Arbitrary File Download Vulnerability
No description provided by source...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...
Joomla component com_joomanager parameters path to arbitrary File Download vulnerability
No description provided by source...
CYSTEME Finder <= 1.3 - Unauthenticated LFI and Unauthenticated File Upload
CYSTEME does not properly check SESSION Cookies allowing a remote attacker to upload, view, or delete files from any location on the remote file system. - Retrieve all data in the root wordpress directory. This will return JSON. Exploit:...
WordPress Bonkersbeat / Method / Awake Arbitrary File Download
Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk Myblog : http://xbadgirl21.blogspot.com/ + DESCRIPTION : ...
HandMade Connection CMS index.php parameter file arbitrary File Download vulnerability
No description provided by source...
Joomla AceFTP component parameters item an arbitrary File Download vulnerability
No description provided by source...
FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)
The phpmyadmin development team reports : Weakness with cookie encryption Multiple XSS vulnerabilities Multiple XSS vulnerabilities PHP code injection Full path disclosure SQL injection attack Local file exposure Local file exposure through symlinks with UploadDir Path traversal with SaveDir and...
Joomla com aceftp Arbitrary File Download Vulnerability
No description provided by source...
Arbitrary File Download Vulnerability in ZTE ZXECS EBG2800
The ZXECS EBG2800 is a converged communications product that integrates data, voice, security, behavior management and rich value-added business applications into a single system, providing a variety of functions required by enterprises in a modular format. An arbitrary file download vulnerabilit...
phpmyadmin -- multiple vulnerabilities
The phpmyadmin development team reports: Weakness with cookie encryption Multiple XSS vulnerabilities Multiple XSS vulnerabilities PHP code injection Full path disclosure SQL injection attack Local file exposure Local file exposure through symlinks with UploadDir Path traversal with SaveDir and...
wordpress force force-download.php parameter file arbitrary File Download vulnerability
No description provided by source...
ColoradoFTP 1.3 Prime Edition (Build 8) Directory Traversal
Advisory Information Title: Directory Traversal Vulnerability in ColoradoFTP v1.3 Prime Edition Build 8 Date published: n/a Date of last update: n/a Vendors contacted: ColoradoFTP author Sergei Abramov Discovered by: Rv3Laboratory Research Team Severity: High 02. Vulnerability Information...
Instacart: Reflected File Download on recipe list search
Hi guys, Right now I'm searching for JSON issues on your API so I started to go deep into the XHR requests. When I noticed the following request:...
Wordpress force download Arbitrary File Download
No description provided by source...
WebNMS Framework Server 5.25.2 SP1 - Multiple Vulnerabilities
WebNMS Framework Server 5.25.2 SP1 - Multiple Vulnerabilities Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure:...
WebNMS Framework Server 5.2 / 5.2 SP1 - Multiple Vulnerabilities
Exploit for jsp platform in category web applications Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 04/07/2016 / Las...