7977 matches found
JDA Warehouse Management System Buffer Overflow / SQL Injection / XML Injection
Introduction ========= Multiple critical vulnerabilities were identified in JDA Warehouse management system WMS. The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive. Affected Software and Versions...
UBUNTU-CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
Moodle 3.x contains an authentication/authorization flaw where students who export assignments to portfolios can download any stored Moodle file by altering the download URL. This vulnerability affects Moodle 3.x installations and arises from insufficient access controls around file downloads. Th...
CVE-2018-1135
CVE-2018-1135 affects Moodle 3.x: an issue where students posting on forums and exporting posts to portfolios can download any stored Moodle file by altering the download URL. The vulnerability concerns the file download mechanism within Moodle’s portfolio integration (no explicit root cause deta...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
PT-2018-10497
Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description An issue allows students who submitted assignments and exported them to portfolios to download any stored Moodle file by changing the download URL. Recommendations For Moodle versions 3.x, update to a version...
BearAdmin Arbitrary File Download Vulnerability
BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A security vulnerability exists in BearAdmin version 0.5. A remote attacker can exploit the vulnerability by sending the 'name' parameter with a directory traversal sequence to the /admin/databack/download.html page to...
Directory traversal
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
CVE-2018-11413
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
Honeywell Scada System Information Disclosure
Exploit Title: Honeywell Scada System - Information Disclosure Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : 3.2.1.294365 - DeviceType : IPC-HFW2320R-ZS Tested on: Linux To be written after the destination IP address...
CVE-2018-11413: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
CVE-2018-11344
A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...
PT-2018-10502
Name of the Vulnerable Software and Affected Versions ASUSTOR AS6202T ADM version 3.1.0.RFQ3 Description A path traversal issue exists, allowing attackers to specify any file on the system for download using the file1 parameter in the "download.cgi" endpoint. Recommendations For ASUSTOR AS6202T A...
CVE-2018-11344: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...
Arbitrary File Download and Code Execution Vulnerability in Mycncartt v2.0.0.3
MyCnCart MCC for short is a free, open source B2C, B2B e-commerce platform system developed for the Chinese mainland market. Mycncartt v2.0.0.3 suffers from an arbitrary file download and code execution vulnerability, as the program does not make reasonable judgments and filters on the download...
