CVE-2019-7404

CVE-2019-7404 affects LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file by issuing an HTTP request that includes the file’s full pathname (for example, http://192.168.0.1/var/gapm7100_${today’s_date}.log). The connected Red Hat and CVE records reiterate t...

Gemalto DS3 Authentication Server / Ezio Server Command Injection / File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Gemalto Thales Group DS3 Authentication Server / Ezio Server vulnerable version: Ezio DS3 server v3.1.0 fixed version: Ezio DS3 server...

openSUSE Security Update : rubygem-actionpack-5_1 (openSUSE-2019-1344)

This update for rubygem-actionpack-51 fixes the following issues : Security issues fixed : - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to render file bsc1129272. -...

Pornhub: SSRF and local file disclosure by video upload on http://www.youporn.com/

The researcher was successful in exploiting a vulnerability in 3rd encoding party library resulting in the execution of SSRF attacks and Local File Disclosure...

Pornhub: SSRF and local file disclosure by video upload on https://www.tube8.com/

The researcher was successful in exploiting a vulnerability in 3rd party encoding library resulting in the execution of SSRF attacks and Local File Disclosure...

WordPress Diarise 1.5.9 Local File Disclosure

Local File Disclosure in wordpress theme Diarise + Date: 07/05/2019 + CWE Number: CWE-98 + Risk: High + Author: Felipe Andrian Peixoto + Dork: inurl:"wp-content/themes/diarise/" + Vendor Homepage: https://woocommerce.com/?aff=1790 + Contact: [email protected] + Tested on: Windows 7 and...

Pornhub: SSRF and local file disclosure by video upload on https://www.redtube.com/upload

The researcher was successful in exploiting a vulnerability in 3rd party encoding library resulting in the execution of SSRF attacks and Local File Disclosure...

openwsman: Disclosure of arbitrary files outside of the registered URIs

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman serve...

EulerOS 2.0 SP5 : openwsman (EulerOS-SA-2019-1331)

According to the version of the openwsman packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon wa...

OpenSkos Simple Knowledge Organization System 2.0 File Disclosure

Exploit Title : OpenSkos Simple Knowledge Organization System 2.0 Database Configuration Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/05/2019 Vendor Homepage : openskos.org Software Information Link : openskos.org/apiabout-the-openskos-api...

CentOS 7 : openwsman (CESA-2019:0638)

An update for openwsman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Sentrifugo Human Resource Management System 3.2 File Disclosure

Exploit Title : Sentrifugo Human Resource Management System 3.2 Database Configuration Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/05/2019 Vendor Homepage : sentrifugo.com Software Download Link : sentrifugo.com/downloadzip/1556734875...

Amazon Linux 2 : openwsman (ALAS-2019-1196)

Earlier versions of Openwsman are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server. CVE-2019-3816 ...

Important: openwsman

Issue Overview: Earlier versions of Openwsman are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server...

Pulse Secure VPN Arbitrary Command Execution

This module exploits a post-auth command injection in the Pulse Secure VPN server to execute commands as root. The env1 command is used to bypass application whitelisting and run arbitrary commands. Please see related module auxiliary/gather/pulsesecurefiledisclosure for a pre-auth file read that...

openSUSE: Security Advisory for openwsman (openSUSE-SU-2019:1217-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the XML analyzer browser Internet Explorer, which allows a hacker to disclose protected information

The vulnerability of the XML browser analyzer Internet Explorer is related to a bug that restricts XML links to external objects. Exploiting this vulnerability can allow an attacker to gain access to local files and disclose protected information using a specially crafted MHT file MHTML Web Archi...

openSUSE Security Update : openwsman (openSUSE-2019-1217)

This update for openwsman fixes the following issues : Security issues fixed : - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure bsc1122623. - CVE-2019-3833: Fixed a vulnerability in processconnection which could allow an attacker to trigger ...

Internet Explorer XXE vulnerability alerts-a vulnerability alert-the black bar safety net

GMT 4 on 11 May, the Foreign Security Fellow at the John Page public disclosure Internet Explorer 11 XXE vulnerability, successful exploitation of the vulnerability will lead to local file disclosure. Microsoft learned of the vulnerability, given a”temporary non-fix”results. In view of the...

openSUSE Security Update : openwsman (openSUSE-2019-1111)

This update for openwsman fixes the following issues : Security issues fixed : - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure bsc1122623. - CVE-2019-3833: Fixed a vulnerability in processconnection which could allow an attacker to trigger ...