CVE-2016-6852

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware...

chromium-browser: local file disclosure in devtools

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...

Google Chrome Local File Disclosure Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit the vulnerability to download arbitrary files...

Microsoft PowerShell - XML External Entity Injection

Microsoft PowerShell - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-POWERSHELL-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product:...

Shuttle Tech ADSL Wireless 920 WM XSS / Directory Traversal

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Cross Site Scripting Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...

Microsoft Excel Starter 2010 XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel Starter 2010 EXCELC.EXE / "OFFICEVIRT.EXE" This is a bundled Excel "starter" version that comes 'pre-loaded'...

Microsoft Excel Starter 2010 - XML External Entity Injection

Microsoft Excel Starter 2010 - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-STARTER-XXE-REMOTE-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: =================...

SonicWALL Global Management System File Disclosure

File disclosure vulnerability in SonicWALL Global Management System GMC service Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application or system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...

TYPO3 'API method' Directory Traversal Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A directory traversal vulnerability exists in the TYPO3 'API method', which can be exploited by an attacker by sending a UTL request containing a directory traversal sequence '...

SAP NetWeaver AS JAVA 7.5 Directory Traversal Vulnerability

SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from a directory traversal vulnerability. Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 to 7.5 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 04.12.2015 Reported: 05.12.2015 Vendor response:...

Barco ClickShare Arbitrary File Disclosure Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. An arbitrary file disclosure vulnerability exists in Barco ClickShare because it does not adequately validate user-supplied input. An attacker...

NETGEAR ADSL Router JNR2010 Module Remote File Disclosure Vulnerability

The NETGEAR ADSL Router is a router product from the American company NetGear. A remote file disclosure vulnerability exists in NETGEAR ADSL Router JNR2010 version 1.0.0.20. Due to the program failing to adequately validate user-supplied input. An attacker could exploit the vulnerability to view...

NETGEAR ADSL Router JNR1010 1.0.0.32 Authenticated Remote File Disclosure

!/bin/sh NETGEAR ADSL ROUTER JNR1010 1.0.0.32 Authenticated Remote File Disclosure Hardware Version: JNR1010 Firmware Version: 1.0.0.32 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational...

DLink ADSL Router DSL-2750E SEA_1.07 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.07 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

DLink ADSL Router DSL-2730U IN_1.02 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2730U IN1.02 Remote File Disclosure Modem Name: DSL-2730U Time and Date: 2012-05-23 09:51:16 HardwareVersion: U1 Firmware Version: IN1.02 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

NETGEAR ADSL Router JNR2010 1.0.0.20 Authenticated Remote File Disclosure

!/bin/sh NETGEAR ADSL ROUTER JNR2010 1.0.0.20 Authenticated Remote File Disclosure Hardware Version: JNR2010 Firmware Version: 1.0.0.20 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational...

DLink ADSL Router DSL-2750U IN_1.08 Remote File Disclosure Vulnerability

D-Link ADSL router DSL-2750U with firmware version IN1.08 suffers from a file disclosure vulnerability. !/bin/sh D-Link ADSL ROUTER DSL-2750U IN1.08 Remote File Disclosure Modem Name: DSL-2750U Firmware Version: IN1.08 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...