Microsoft IIS Tilde Character Short File/Folder Name Disclosure

Microsoft Internet Information Server IIS suffers from a vulnerability which allows the detection of short names of files and directories which have en equivalent in the 8.3 version of the file naming scheme. By crafting specific requests containing the tilde '' character, an attacker could...

CVE-2020-13268

Removed by vendor...

CVE-2020-13268

GitLab CVE-2020-13268 affects GitLab CE/EE 12.10 through 13.0.1. A specially crafted request could confirm the existence of files stored in object storage without disclosing their contents, exposing partial confidentiality (C for confidentiality; I and A not affected per the source). The vulnerab...

The vulnerability in the protection of controller firmware for automated transformer substations of Schneider Electric Easergy T300 (HU250) allows a intruder to disclose protected information related to firmware files and directories, as well as potentially modify those files.

The vulnerability in the protection of controller firmware for automated transformer substations of Schneider Electric Easergy T300 HU250 is related to the leakage of information about files and directories. Exploiting this vulnerability allows a malicious actor to disclose the protected...

Arbitrary File Read Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read files under the server...

Joomla XCloner Backup 3.5.3 - Local File Disclosure

Joomla XCloner Backup version 3.5.3 suffers from a local file disclosure vulnerability. Exploit Title: Joomla XCloner Backup - Authenticated Local File Disclosure Date: 10.05.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference:...

CVE-2020-12392

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...

DEBIAN-CVE-2020-12392

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...

xcloner,3.53,Other

xcloner,3.53,Other Developer statement Today we have made available a new release — version 3.5.4 — for the unmaintained Joomla version of XCloner. Prior versions of XCloner for Joomla contained an Authenticated Local File Disclosure vulnerability that has been patched in the latest version. Any...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Arbitrary file deletion

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

CVE-2020-13424 affects the Joomla! XCloner component, prior to 3.5.4. The vulnerability is an authenticated local file disclosure via a path traversal in the download functionality of the XClonerBackup component (case 'download'), where the parameter file is used to read arbitrary server files (e...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Critical: thunderbird

Issue Overview: The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code. Th...

Exploit for Missing Authentication for Critical Function in Chadhaajay Phpkb

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition...

Mozilla: Arbitrary local file access with 'Copy as cURL'

The Mozilla Foundation Security Advisory describes this flaw as: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, i...

Mozilla: Arbitrary local file access with 'Copy as cURL'

The Mozilla Foundation Security Advisory describes this flaw as: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, i...

Mozilla: Arbitrary local file access with 'Copy as cURL'

The Mozilla Foundation Security Advisory describes this flaw as: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, i...

Mozilla: Arbitrary local file access with 'Copy as cURL'

The Mozilla Foundation Security Advisory describes this flaw as: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, i...