Imgur: Local file read in image editor

Filepaths were able to traverse up outside of their intended directory when using the /edit/process API endpoint. Insufficient imageid filtration in image editor allowed an attacker to read arbitrary files. An attacker could read files by setting file path in imageid GET param in /edit/process AP...

Linknat Vos Manager Traversal

This module attempts to test whether a file traversal vulnerability is present in version of linknat vos2009/vos3000 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linknat Vos Manager...

Digital Paradise Mobile Office Middleware Interface File Traversal Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. A file traversal vulnerability in the interface of Digital Paradise's Mobile Office Middleware can be...

EdmWebVideo录像监控系统任意文件遍历

No description provided by source...

中科网威防火墙(NPFW)文件遍历漏洞

No description provided by source...

APPLE-SA-2015-10-21-1 iOS 9.1

APPLE-SA-2015-10-21-1 iOS 9.1 iOS 9.1 is now available and addresses the following: Accelerate Framework Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to arbitrary code execution Description: A...

iGENUS系统某处任意文件遍历

简要描述： RT 详细说明： 开始提交的是看到http://.../bugs/wooyun-2010-0136712。还以为是重复了。仔细看看原来不是重复的。同样的是Lang存在遍历，%00截断 http://...//sys/login.php?Lang=../../../../../../../../../../etc/passwd%00.jpeg&cmd=form 谷歌搜索关键字:iGENUS-系统管理中心 ...:8090/sys/login.php?cmd=form 部分案例 http://...:8090/sys/login.php?cmd=form...

WordPress Multi Plugin Installer Plugin <= 1.1.0 - Local File Traversal

Because of this vulnerability, unauthenticated attackers can read arbitrary files. Solution Update the plugin...

Multi Plugin Installer <= 1.1.0 - Unauthenticated File Traversal

The multi-plugin-installer WordPress plugin was affected by an Unauthenticated File Traversal security vulnerability...

53kf任意文件遍历漏洞

简要描述： 听说你们很给力啊，先试试水。 详细说明： 存在漏洞的地址为： http://www.53kf.com/?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00login 漏洞证明： 成功猜到了nginx的配置文件，如下： 得到了网站根路径，读个robots.txt试试看 那么是不是可以代码审计了呢...

大汉网络JCMS任意文件下载

简要描述： 大汉网络文件遍历 详细说明： 漏洞Url： /jcms/m5e/module/voting/down.jsp?filename=a.txt&pathfile=/etc/passwd 下载文件： root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin...

Novell NetIQ Sentinel Agent Manager NQMcsVarSet ActiveX DumpToFile() Remote Code Execution

The remote host contains the NQMcsVarSet ActiveX control distributed with Novell NetIQ Sentinel Agent Manager. The installed control is reportedly affected by a remote code execution vulnerability with the DumpToFile method where it does not properly sanitize the path for a filename. This could...

DSA-2915-2 dpkg - security update

Bulletin has no description...

DSA-2915-1 dpkg - security update

Bulletin has no description...

SDCMS某处设计缺陷导致遍历任意文件内容

简要描述： SDCMS某处设计缺陷导致遍历任意文件内容 详细说明： 1、首先看看缺陷文件： 文件/sdcms/admin/sdtheme.asp ...... 第138行： case "edit" dim filename:filename=sdcms.fget"filename",0 if notsdcms.checkstrfilename,"filename" then sdcms.echo "filename is wrong" sdcms.die end if if notsdcms.isfile"../theme/"&filename then sdcms.echo...

IBM WebSphere Sensor Events多个输入验证漏洞

BUGTRAQ ID: 53859 IBM WebSphere Sensor Events可提供创建和管理企业级传感器的中间件基础架构。 IBM WebSphere Sensor Events在实现上存在P001414 XSS、文件路径遍历、不安全HTTP方法、searchView.jsp中的deferredView.jsp XSS问题内的P001538跨站脚本执行漏洞, 攻击者可利用这些漏洞窃取Cookie身份验证凭证、执行非法操作或泄漏敏感信息。 0 IBM WebSphere Sensor Events 7.0 厂商补丁： IBM ---...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Title: ====== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=487 VL-ID: ===== 487 Introduction: ============= Flatnux is no database CMS for accessible websites, corporate websites, e-commer...

Flatnux CMS 2011 08.09.2 CSRF / XSS / Directory Traversal

Title: ====== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=487 VL-ID: ===== 487 Introduction: ============= Flatnux is no database CMS for accessible websites, corporate websites, e-commer...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Document Title: =============== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=487 Release Date: ============= 2012-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 487...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Document Title: =============== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=487 Release Date: ============= 2012-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 487...