Cisco Unified Communications Manager 7/8/9 - Directory Traversal Detection

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 !/usr/bin/env python3 -- coding:...

WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal Detection

A directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Node.js st module Directory Traversal Detection

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the st module before 0.""" import ...

Elasticsearch - Local File Inclusion Detection

Elasticsearch before 1.4.5 and 1.5.x before 1.5.2 allows remote attackers to read arbitrary files via unspecified vectors when a site plugin is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch before 1.""" import re from kittysploit import from lib.protocols.http.httpclient...

D-Link Routers - Local File Inclusion Detection

D-Link routers DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02,DWR-512 through 2.02,DWR-712 through 2.02,DWR-912 through 2.02, DWR-921 through 2.02, DWR-111 through 1.01, and probably others with the same type of firmware allows remote attackers to read arbitrary files via a /...

Tyto Sahi pro 7.x/8.x - Local File Inclusion Detection

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Tyto Sahi Pro versions through 7.""" from...

Homematic CCU3 - Local File Inclusion Detection

eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. !/usr/bin/env python3 -- coding: utf-8 -- """eQ-3 AG...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal Detection

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

webEdition 6.3.8.0 - Directory Traversal Detection

A directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in showTempFile.""" impo...

Magento Server MAGMI - Directory Traversal Detection

Magento Server MAGMI aka Magento Mass Importer contains a directory traversal vulnerability in web/ajaxpluginconf.php. that allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Magento Server MAGMI aka Magento Mass...

Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion Detection

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in t...

Geddy <13.0.8 - Local File Inclusion Detection

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the PATHINFO to the default URI. !/usr/bin/env python3 -- coding: utf-8 -- """Geddy prior to version 13.""" impo...

LOYTEC LGATE-902 6.3.2 - Local File Inclusion Detection

LOYTEC LGATE-902 6.3.2 is susceptible to local file inclusion which could allow an attacker to manipulate path references and access files and directories including critical system files that are stored outside the root folder of the web application running on the device. This can be used to read...

WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion Detection

WordPress Duplicator 1.3.24 & 1.3.26 are vulnerable to local file inclusion vulnerabilities that could allow attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't...

Onkyo TX-NR585 Web Interface - Directory Traversal Detection

Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal and local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote...

Suprema BioStar <2.8.2 - Local File Inclusion Detection

Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Suprema BioStar before 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

ThinkAdmin 6 - Local File Inclusion Detection

ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkAdmin version 6 is affected by a local file inclusion...

LionWiki <3.2.12 - Local File Inclusion Detection

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """LionWiki before 3.""" import re from kittysploit import from...

Draytek VigorConnect 6.0-B3 - Local File Inclusion Detection

Draytek VigorConnect 1.6.0-B3 is susceptible to local file inclusion in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. !/usr/bin/env...

WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure Detection

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Modern Events Calendar Lite before 5.""" from kittysplo...