14259 matches found
PT-2024-14927 · WordPress · Popup Builder
Name of the Vulnerable Software and Affected Versions: Popup Builder WordPress plugin versions prior to 4.2.6 Description: The issue concerns a lack of validation for a parameter, which could allow users with the administrator role to perform a Server-Side Request Forgery SSRF attack in Multisite...
VulnCheck KEV: CVE-2021-30497
Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...
CrateDB database has an arbitrary file read vulnerability
Summary There is an arbitrary file read vulnerability in the CrateDB database, and authenticated CrateDB database users can read any file on the system. Details There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, a...
GHSA-475G-VJ6C-XF96 CrateDB database has an arbitrary file read vulnerability
Summary There is an arbitrary file read vulnerability in the CrateDB database, and authenticated CrateDB database users can read any file on the system. Details There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, a...
CVE-2024-24565 CrateDB database has an arbitrary file read vulnerability
CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY...
UFIDA Network Technology Corporation YonBIP Arbitrary File Read Vulnerability
YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. An arbitrary file read vulnerability exists in YonBIP, which can be exploited by an attacker to read the contents of system files...
PT-2024-20456 · Cratedb · Cratedb
Name of the Vulnerable Software and Affected Versions: CrateDB versions prior to 5.3.9 CrateDB versions prior to 5.4.8 CrateDB versions prior to 5.5.4 CrateDB versions prior to 5.6.1 Description: The CrateDB database has a flaw in its COPY FROM function, which allows authenticated attackers to...
PT-2024-1736 · Honeywell · Honeywell Experion Controledge Virtualuoc +1
Name of the Vulnerable Software and Affected Versions: Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access, potentially allowing an attacker to read fil...
CVE-2023-4550 Unauthenticated Arbitrary File Read
Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. Thi...
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read
python poc.py usage: python poc.py http://127.0.0.1:8888/ /etc/passwd import threading import http.client import time import uuid import urllib.parse import sys if lensys.argv != 3: print' usage: python poc.py http://127.0.0.1:8888/ /etc/passwd' exit databytes =...
PT-2024-13246 · Opentext · Opentext Appbuilder
Name of the Vulnerable Software and Affected Versions: OpenText AppBuilder versions 21.2 through 23.2 Description: The issue allows an unauthenticated or authenticated user to abuse a page of AppBuilder to read arbitrary files on the server. This is due to improper input validation, making files ...
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit
Jenkins versions 2.441 and below and LTS 2.426.3 and below remote arbitrary file read proof of concept exploit written in Python. python poc.py usage: python poc.py http://127.0.0.1:8888/ /etc/passwd import threading import http.client import time import uuid import urllib.parse import sys if...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and ear...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 This repository presents a proof-of-concept of...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 - Jenkins 任意文件读取 利用工具 安装 CVE-2024...
Exploit for Path Traversal in Jenkins
PoC-jenkins-rceCVE-2024-23897. On this git you can find all i...
Exploit for Path Traversal in Jenkins
PoC-jenkins-rceCVE-2024-23897. On this git you can find all i...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulne...