jenkins: workspace browser allowed accessing files outside the workspace (SECURITY-904)

An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace...

Path traversal

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

CVE-2018-7572

Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network...

WordPress Plugin Background Takeover 4.1.4 - Directory Traversal

WordPress Plugin Background Takeover 4.1.4 - Directory Traversal Exploit Title: WP Background Takeover, Directory Traversal = 4.1.4 Google Dork: inurl:/plugins/wpsite-background-takeover Date: 2018-03-08 Exploit Author: Colette Chamberland, Defiant, Inc. Vendor Homepage: https://99robots.com...

MyBB Directory Traversal Vulnerability (CNVD-2017-06579)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the smilie module in MyBB versions prior to 1.8.11. The vulnerability can be exploited to browse files with the 'pathfolder' parameter...

CVE-2016-5994

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...

Wordpress-jQuery Html5 Plugin File Browsing Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A file browsing vulnerability in the Wordpress-jQuery Html5 plugin allows attackers to exploit the vulnerability to obtain sensitive information...

CVE-2012-2225

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

Design/Logic Flaw

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

CVE-2012-2225

CVE-2012-2225 affects 360zip 1.93beta. The vulnerability allows remote code execution via vectors related to file browsing and file extraction. Root cause details are not fully specified in the provided documents, and there is no explicit exploit description or affected versions beyond 1.93beta. ...

CVE-2012-2225

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

CVE-2010-4680

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...

Microsoft Windows Folder GUID Code Execution (MS06-045; CVE-2006-3281)

Microsoft Windows is a very popular operating system that is deployed the majority of desktops and workstations in business and home user environments. Included with the operating system is a graphical file browsing and execution shell called Windows Explorer. The application is capable of...

bo-blog2.0.3文件浏览漏洞

O-blog2.0.3的编辑器存在一个文件浏览漏洞,存在漏洞文件在于whizzylink.php和whizzypic.php,不过前一个可以浏览任意文件和目录,后一个只能浏览目录和图片,并能查看图片br / br / $docpath = $REQUEST'd';br / $extensions = $REQUEST'x' ? '/' . $REQUEST'x' .'$/i' : '/.html|pdf|txt$/i';br / $d = $SERVER'DOCUMENTROOT' . '/' . $docpath;br / $d = strreplace'//','/',$d;br /...

[cosmoshop again] sql injection + view all files as admin user

i am: l0om page: www.excluded.org product: cosmoshop 1 show all files as admin-user 2 sql injection Cosmoshop - Lse = V8.11.106 1 Show all files as an admin-user: /cgi-bin/admin/bestellvorgang/editmailtexte.cgi?file=../../../../../../../../../etc/passwd00...

hostingControl.txt

-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...

Hosting Controller

-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...

Cherokee Web Server URI Traversal Arbitrary File Access

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...

[Full-Disclosure] Multiples vulnerabilities in JAWS

check this... ///////////////////////////////////////////////////// //// Vulnerable Program: JAWS //// //// Version : 0.3 ; it's BETA probably ; //// //// Url: http://www.jaws.com.mx //// //// The Bug: Multiples vulnerabilities //// //// Date: Today, July 5 off 2004 //// //// Author: Fernando...