Synology DiskStation Manager (DSM) 4.3-3776 XSS / File Disclosure / Command Injection Vulnerabilities - Active Check

Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WP Online Store Plugin for WordPress Multiple Parameter File Disclosure

The WP Online Store Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'turl' and 'file' parameters. An unauthenticated, remote attacker can exploit this to view arbitrary files ...

ModSecurity < 2.7.3 XML External Entity (XXE) Data Parsing Arbitrary File Disclosure

Binary data 6991.prm...

KCFinder 2.51 - Local File Disclosure Vulnerability

Exploit for php platform in category web applications -PoC- POST http://server/kcfinder/browse.php?type=images&lng=en&act=download HTTP/1.1 Host: server Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection:...

KCFinder 2.51 - Local File Disclosure

KCFinder 2.51 - Local File Disclosure --------------------------------------------------- Exploit Title: KCFinder Local File Disclosure Author: DaOne Vendor Homepage: http://kcfinder.sunhater.com/ Category: webapps/php Version: 2.51 + old versions Google dork: inurl:kcfinder/browse.php...

KCFinder 2.51 Local File Disclosure

--------------------------------------------------- Exploit Title: KCFinder Local File Disclosure Author: DaOne Vendor Homepage: http://kcfinder.sunhater.com/ Category: webapps/php Version: 2.51 + old versions Google dork: inurl:kcfinder/browse.php...

KCFinder 2.51 - Local File Disclosure

--------------------------------------------------- Exploit Title: KCFinder Local File Disclosure Author: DaOne Vendor Homepage: http://kcfinder.sunhater.com/ Category: webapps/php Version: 2.51 + old versions Google dork: inurl:kcfinder/browse.php...

[RIPS] A static source code analyser for vulnerabilities in PHP scripts

RIPS is a tool written in PHP to find vulnerabilities in PHP applications using static code analysis. By tokenizing and parsing all source code files RIPS is able to transform PHP source code into a program model and to detect sensitive sinks potentially vulnerable functions that can be tainted b...

ZeroShell 2.0RC2 File Disclosure / Command Execution Vulnerability - Active Check

ZeroShell is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZeroShell 2.0RC2 File Disclosure / Command Execution

Exploit Title: ZeroShell = 2.0RC2 Local file disclosure and Remote Command Execution Date: 13/08/2013 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.zeroshell.org - www.zeroshell.org/download/ Version: 2.0RC2 Category: Local File disclosure and Remote Command Execution Google...

Adobe ColdFusion all versions LFD exploit (without Metasploit)

This code exploit a Local FIle Disclosure vulnerability in ColdFusion that allows attackers to dump administrator passwords and log into the admin panel. !/usr/bin/perl ColdFusion Locale File Disclosure exploit without Metasploit Google Dork: intitle:"Index of /CFIDE/" administrator Date:...

Novell ZENworks Mobile Management DUSAP.php Language Parameter Vulnerability

Added: 07/18/2013 CVE: CVE-2013-1082 BID: 60179 OSVDB: 91118 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...

ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln

Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...

Oracle Linux 4 : thunderbird (ELSA-2008-0616)

From Red Hat Security Advisory 2008:0616 : Updated thunderbird packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbi...

ModSecurity < 2.7.3 XML External Entity (XXE) Data Parsing Arbitrary File Disclosure

According to its banner, the version of ModSecurity installed on the remote host is earlier than 2.7.3. It is, therefore, potentially affected by a file disclosure vulnerability. An improperly configured XML parser could allow untrusted XML entities from external sources to be accepted, thus...

Seowonintech Devices - Remote Command Execution

Seowonintech Devices - Remote Command Execution !/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com...

Seowonintech Devices - Remote Command Execution

!/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com ===================================================== type: | platform: | description:...

Seowonintech Remote Root Exploit

Remote root exploit for all Seowonintech devices. !/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com...

Seowonintech Remote Root

!/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com ===================================================== type: | platform: | description:...

Prestige Software CMS File Disclosure

Exploit Title : Prestige Software CMS Local File Disclosure Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/en/ Software Link : http://www.prestijsoftware.com/tr/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu/BT/Fedora - win7 Dork : intext:Bu site...