10301 matches found
PT-2015-3249
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.40 PHP versions 5.5.x prior to 5.5.24 PHP versions 5.6.x prior to 5.6.8 Description The issue is related to the lack of checking for %00 sequences in pathnames, which could allow remote attackers to read arbitrary fil...
CVE-2015-3412
PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the streamresolveincludepath function in ext/standard/streamsfuncs.c, as...
UBUNTU-CVE-2015-4025
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to 1...
WordPress WP Mobile Edition Plugin - Local File Include
WP Mobile Edition plugin is prone to a local file include vulnerability. It allows an attacker to view files and execute local scripts in the context of the web server process. Solution Upgrade the plugin...
AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability
Exploit Title: AnimaGallery 2.6 theme and lang cookie parameter Local File Include Vulnerability Date: 2015/06/07 Vendor Homepage: http://dg.no.sapo.pt/ Software Link:http://dg.no.sapo.pt/AnimaGallery2.6.zip Version: 2.6 Tested on: Centos 6.5,php 5.3.2,magicquotesgpc=off Category: webapps...
SE HTML5 Album Audio Player <= 1.1.0 - Local File Include
The se-html5-album-audio-player v1.1.0 plugin for wordpress has a local file include vulnerability. The downloadaudio.php file does not check to see if the user is authenticated, it only attempts to check if the path is in /wp-content/uploads which is easily defeated with ../. PoC...
SE HTML5 Album Audio Player <= 1.1.0 - Local File Include
The se-html5-album-audio-player v1.1.0 plugin for wordpress has a local file include vulnerability. The downloadaudio.php file does not check to see if the user is authenticated, it only attempts to check if the path is in /wp-content/uploads which is easily defeated with ../...
Wordpress Really Simple Guest Post <= 1.0.6 - File Include Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Really Simple Guest Post File Include Google Dork: inurl:"really-simple-guest-post" intitle:"index of" Date: 04/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/really-simple-guest-post/...
Really Simple Guest Post Plugin <= 1.0.6 - File Include
The really-simple-guest-post WordPress plugin was affected by a File Include security vulnerability...
WordPress Really Simple Guest Post Plugin <= 1.0.6 - File Include
Because of this vulnerability, an attacker can come directly into the URL /wp-content/plugins/really-simple-guest-post/simple-guest-post-submit.php and send a post data. Solution Update the plugin...
PentestBox - Portable Penetration Testing Distribution for Windows Environments
PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...
UBUNTU-CVE-2015-4050
FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the controller attribute is set, which allows remote attackers to bypass URL signing and security...
Wireless Photo Transfer v3.0 iOS - File Include Vulnerability
Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...
PHP Multiple Function Security Bypass Vulnerabilities
PHP is a general-purpose web programming language. A security bypass vulnerability exists in the PHP setincludepath, tempnam, rmdir, and readlink functions, where by accepting null values in a path, a remote attacker can submit special values to bypass security controls on the path values...
OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities
Document Title: =============== OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ===================================...
Sensio Labs Symfony FragmentListener ESI Security Bypass Vulnerability
Sensio Labs Symfony is a free French Sensio Labs company , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Sensio...
Wireless Photo Transfer 3.0 iOS - File Inclusion Vulnerability
Exploit for iOS platform in category web applications Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== Transfer your photo without usb. The best wireless photo transfer app on the App Stor...
OYO File Manager 1.1 (iOS Android) - Multiple Vulnerabilities
OYO File Manager 1.1 iOS Android - Multiple Vulnerabilities Document Title: =============== OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-18...
PT-2015-3430
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.41 PHP versions 5.5.x prior to 5.5.25 PHP versions 5.6.x prior to 5.6.9 Description The issue is related to an error in handling file paths containing the x00 character. This can allow a remote attacker to gain...
OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities
Exploit for multiple platform in category web applications Document Title: =============== OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities Product & Service Introduction: =============================== OYO File Manager, helps you to manage files in your mobile from your computer over...