Buffalo TeraStation TS-Series multiple vulnerabilities

Exploit for hardware platform in category web applications Buffalo's TeraStation network attached storage NAS solutions offer centralized storage and backup for home, small office and business needs. The firmware is based on Linux ARM and most of the internal software is written using Perl. The...

Buffalo TeraStation TS-Series Command Execution

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

CVE-2012-6069: Relative Path Traversal

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the...

VMSA-2012-0018 VMware security updates for vCSA and ESXi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VMware Security Advisory Advisory ID: VMSA-2012-0018 Synopsis: VMware security updates for vCSA and ESXi Issue date: 2012-12-20 Updated on: 2012-12-20 initial advisory CVE numbers: ------------- vCSA --------------- CVE-2012-6324, CVE-2012-6325...

VMSA-2012-0018: VMware security updates for vCSA and ESXi

The remote ESXi is missing one or more security related Updates from VMSA-2012-0018. Summary VMware has updated vCenter Server Appliance vCSA and ESX to address multiple security vulnerabilities Relevant releases vCenter Server Appliance 5.1 prior to vCSA 5.1.0b vCenter Server Appliance 5.0 prior...

VMware ESXi/ESX security updates (VMSA-2012-0018)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0018. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0018 : VMware security updates for vCSA and ESXi

a. vCenter Server Appliance directory traversal The vCenter Server Appliance vCSA contains a directory traversal vulnerability that allows an authenticated remote user to retrieve arbitrary files. Exploitation of this issue may expose sensitive information stored on the server. VMware would like ...

Novell File Reporter 'NFRAgent.exe' Multiple Security Vulnerabilities

Novell File Reporter is prone to the following security vulnerabilities: 1. A heap-based buffer-overflow vulnerability 2. Multiple arbitrary file-download vulnerabilities 3. An arbitrary file-upload vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

Symantec Messaging Gateway version 9.5.3-3 suffers from an authenticated arbitrary file download vulnerability. ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266...

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Referenc...

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

NGS000266 Technical Advisory: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

Symantec Messaging Gateway 9.5 Log File Download Vulnerability

This module will download a file of your choice against Symantec Messaging Gateway. This is possible by exploiting a directory traversal vulnerability when handling the 'logFile' parameter, which will load an arbitrary file as an attachment. Note that authentication is required in order to...

IBM WebSphere Portal Dojo Module Arbitrary File Download

The version of WebSphere Portal on the remote host is using a vulnerable version of the Dojo toolkit. Input to the 'path' parameter of layerLoader.jsp is not properly validated. A remote, unauthenticated attacker could exploit this to download arbitrary files. This vulnerability exists due to an...

Alog CMS system XSS arbitrary File Download read vulnerability-vulnerability warning-the black bar safety net

| Alog CMS Background any download any remove any of the columns of the directory 漏洞 文件 :admin/mod/uploadfile.mod.php $baseDir = SITEROOT.'static/upload/'; $currentDir = $GET'dir' ? $GET'dir' : $POST'dir' ? $POST'dir' : "; //without any filter $currentPath = $baseDir.$ currentDir; Any download...

Novell File Reporter Agent FSFUI UICMD 126 Arbitrary File Download

The version of Novell File Reporter Agent running on the remote host has an arbitrary file download vulnerability. Making a specially crafted POST request to /FSF/CMD for records with a name of FSFUI and UICMD of 126 could result in arbitrary files being downloaded. A remote, unauthenticated...

Xivo 1.2 arbitrary File Download-vulnerability warning-the black bar safety net

Xivo 1.2 Arbitrary File Download under root privileges Author : Mr. Un1k0d3r Developer: https://wiki.xivo.fr Download address: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Effect version: 1.2 last patched version Test version: Linux xivo 2.6.32-5-4 8 6 Test using: Using the...

Xivo 1.2 Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Version: 1.2...

Xivo 1.2 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...