7838 matches found
CVE-2012-4596
Directory traversal vulnerability in McAfee Email Gateway MEG 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL...
CVE-2012-4596: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in McAfee Email Gateway MEG 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL...
IOServer 1.0.18.0 Directory Traversal / File Download
===================================================================== BEGIN Foofus.net Security Advisory: foofus-20120817 BEGIN ===================================================================== Title: IOServer "Root Directory" Trailing Backslash Web Server Vuln Allows: Arbitrary File Access,...
IBM WebSphere Portal Dojo Module URI Traversal Arbitrary File Access
The version of WebSphere Portal on the remote host is using a vulnerable version of the Dojo toolkit. Input to the 'path' parameter of layerLoader.jsp is not properly validated. A remote, unauthenticated attacker could exploit this to download arbitrary files. %NASLMINLEVEL 70300 C Tenable Networ...
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
A flaw was found in the way Firefox handles form history. A malicious web page could steal saved form data by synthesizing input events, causing the browser to auto-fill form fields which could then be read by an attacker. CVE-2009-3370 A flaw was found in the way Firefox creates temporary file...
Xoops Extgallery 1.0.8 Shell Upload / File Download
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Xoops Module (extgallery-v1.0.8) Multiple Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Symantec Web Gateway 5.0.28 LFI / Code Execution
Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...
Symantec Web Gateway 5.0.2.8 Multiple Vulnerabilities
Exploit for linux platform in category web applications Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include:...
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include:...
MikroTik Winbox < 5.17 File Download DoS
According to its self-reported version number, the installation of MikroTik Winbox hosted on the remote web server is affected by a denial of service vulnerability. An unauthenticated, remote attacker may make multiple requests to download a large file, resulting in the service becoming...
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...
WordPress Tinymce Thumbnail Gallery 1.0.7 File Disclosure
Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins : http://downloads.wordpress.org/plugin/tinymce-thumbnail-gallery.zip Date : 25-05-2012 Google Dork :...
Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists due to insufficiently filtered user-supplied data used in a call to exec in multiple...
Zoph 0.9pre2 CSRF / File Disclosure / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Micro disc(conditional)arbitrary File Download vulnerability-vulnerability warning-the black bar safety net
Brief description: Not verify the file owner, to get to the specific file information can then be downloaded directly, but the information is not easy to obtain. Detailed description: http://openapi.vdisk.me/?m=file&a=jumptos3&uid=UID&fid=FID Without any certification that the turning download...
Liferay Portal 6.0.5 / 6.0.6 Arbitrary File Download
According to its self-reported version number, the installation of Liferay Portal hosted on the remote web server is affected by an arbitrary file download vulnerability. A remote, authenticated attacker may be able to download arbitrary files using a specially crafted WebDAV request. Note that...
Liferay Portal < 6.0.6 Multiple Vulnerabilities
According to its self-reported version number, the installation of Liferay Portal hosted on the remote web server is affected by multiple vulnerabilities : - An arbitrary file download vulnerability exists when Apache Tomcat is used, which allows remote, authenticated users to download arbitrary...
Artiphp CMS 5.5.0 database backup disclosure Exploit-vulnerability warning-the black bar safety net
? php / Artiphp CMS 5.5.0 Database Backup Disclosure Exploit Author: Artiphp www.2cto.com http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Description: Artiphp stores database backups using...
Symantec Web Gateway Multiple Security Issues
SUMMARY Symantecs Web Gateway management GUI is susceptible to file include command injection/execution, file upload/execution and file download/deletion security issues. The management GUI is also susceptible to cross-site scripting XSS. Successful exploitation could result in execution of...