14151 matches found
Openbravo ERP XXE Arbitrary File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/dns' require 'rexml/document' class MetasploitModule 'Openbravo ERP XXE Arbitrary File Read', 'Description' = %q The Openbravo ERP XML API expands external...
SAP Internet Graphics Server (IGS) XMLCHART XXE
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...
Joomla weblinks-categories Unauthenticated SQL Injection / Arbtirary File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla weblinks-categories Unauthenticated SQL Injection Arbitrary File Read', 'Description' = %q Joomla versions 3.2.2 and below are vulnerable ...
AlienVault Authenticated SQL Injection Arbitrary File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "AlienVault Authenticated SQL Injection Arbitrary File Read", 'Description' = %q AlienVault 4.6.1 and below is susceptible to an authenticated SQL...
Apache Tomcat AJP File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/apachejp' class MetasploitModule 'Apache Tomcat AJP File Read', 'Description' = %q When using the Apache JServ Protocol AJP, care must be taken when...
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
GHSA-MCMC-C59M-PQQ8 GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
CVE-2022-44268-automated CVE-2022-44268 ImageMagick Arbitrary...
openSUSE Security Advisory (SUSE-SU-2024:2983-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for qemu (SUSE-SU-2024:2977-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Trellix多款产品 安全漏洞
Trellix NX and others are a range of security software from FireEye Trellix USA. A security vulnerability exists in various Trellix products. An attacker exploiting the vulnerability could read or download arbitrary files on the server. The following products are affected: NX, EX, FX, AX, IVX and...
Arbitrary File Read
org.apache.seatunnel, seatunnel-web is vulnerable to Arbitrary File Read. The vulnerability is caused due to a missing validation in the MySQL connection URL using parameters allowLoadLocalInfile, allowLoadLocalInfile , allowUrlInLocalInfile and allowLoadLocalInfileInPath. This can lead to an...
The vulnerability of the microprogramming software in routers like Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters allows a hacker to read arbitrary files within the system.
The vulnerability of the Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters exists due to a validation error in processing directory traversal sequences. Exploiting this vulnerability allows an attacker to read arbitrary files in the system using a specially created HTTP request...
Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins
Intro This is an exploit for CVE-2024-43044, an arbitrary fil...
CVE-2024-42992
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-42992
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2024-30246 · Pandas · Pandas
Name of the Vulnerable Software and Affected Versions: Pandas version 2.2.2 Description: A critical flaw was discovered in the Pandas library, allowing for arbitrary file reads, which risks sensitive data exposure. The library has been downloaded over 54 million times and is a cornerstone tool fo...
