Lucene search
+L

1267 matches found

CNVD
CNVD
•added 2018/12/03 12:00 a.m.•54 views

PHP-Proxy Weak Encryption Vulnerability

PHP-Proxy is a web-based proxy script featuring fast, easy customization and the ability to provide support for complex websites such as YouTube and Facebook. A weak encryption vulnerability in the strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy versions 5.1.0 and...

7.5CVSS6.6AI score0.01132EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2018/03/20 12:00 a.m.•46 views

Intelbras Telefone IP TIP200 LITE Local File Disclosure

Exploit Title: INTELBRAS TELEFONE IP TIP200/200 LITE Local File Include Google Dork: Date: 16/03/2018 Exploit Author: Matheus Goncalves - anhax0r Vendor Homepage: https://www.facebook.com/anhaxteam/ Software Link: Version: 60.0.75.29 REQUIRED Tested on: Debian CVE : if applicable Remember that yo...

7.1AI score
SaveExploits0
NVD
NVD
•added 2018/03/14 7:29 p.m.•35 views

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

9.8CVSS8.9AI score0.01793EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2018/03/14 7:29 p.m.•14 views

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

9.8CVSS5.7AI score0.01793EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2018/03/14 7:29 p.m.•42 views

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

9.8CVSS6.6AI score0.01793EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/03/14 7:00 p.m.•55 views

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

9AI score0.01793EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/14 7:00 p.m.•122 views

CVE-2018-8712

Webmin 1.840/1.880 expose a Local File Inclusion flaw due to weak default config: enabling "Can view any file as a log file" lets non-privileged users read sensitive local files (e.g., /etc/shadow) via GET /syslog/save_log.cgi?view=1&file=/etc/shadow. Root cause: default settings grant access to ...

9.8CVSS8.1AI score0.01793EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/14 12:00 a.m.•9 views

CVE-2018-8712: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

9.8CVSS8.1AI score0.01793EPSS
SaveExploits0References2
zdt
zdt
•added 2017/01/23 12:00 a.m.•53 views

Chromebackdoor graniet v3.0 web panel Multi Vulnerability

Exploit for php platform in category web applications Exploit Title: botnet graniet chrome backdoor v3.0 web panel multi vulnerability Date: 10-1-2017 Exploit Author: alqnas eslam Vendor Homepage:fb.com/alqnas4 Software Link:https://github.com/graniet/chromebackdoor Tested on:any os 1- cross site...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/07/11 12:00 a.m.•24 views

ZTE gateway device /modules/service/download.php the file id parameter local file include vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/06/22 12:00 a.m.•27 views

WordPress Mobile Detector <=3.5 resize.php the src parameter local file include vulnerability

No description provided by source...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2016/02/22 12:00 a.m.•36 views

InstantCoder 1.0 iOS - Multiple Vulnerabilities

InstantCoder 1.0 iOS - Multiple Vulnerabilities Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1738 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID...

0.3AI score
SaveExploits0
zdt
zdt
•added 2016/02/22 12:00 a.m.•41 views

InstantCoder 1.0 iOS - Multiple Vulnerabilities

Exploit for iOS platform in category web applications Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities Product & Service Introduction: =============================== You are one of the best developers in the world and you would like to code anytime, anywhere...

6.9AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/02/22 12:00 a.m.•38 views

InstantCoder 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1738 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1738...

5.3AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2016/02/03 12:00 a.m.•57 views

File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities

Document Title: =============== File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1704 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ====================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/01/27 12:00 a.m.•46 views

Secure Item Hub 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

5.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/01/19 12:00 a.m.•28 views

JCMS政府信息公开系统在/lm/front/reg_2.jsp存在本地文件包含漏洞

No description provided by source...

7.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2015/12/04 12:00 a.m.•19 views

WordPress TheCartPress Plugin 1.4.7 - Multiple Vulnerabilities

TheCartPress plugin is prone to remote code execution and local file include vulnerabilities. Because of these multiple vulnerabilities, an attacker can do a remote code execution or disclosure local files. Solution Update the plugin...

2.6AI score
SaveExploits0References1Affected Software1
zdt
zdt
•added 2015/09/28 12:00 a.m.•29 views

My.WiFi USB Drive 1.0 iOS - File Include Vulnerability

Exploit for iOS platform in category web applications Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== My WiFi USB drive. Files can be uploaded with any browser. Start the WiFi Drive web server...

6.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2015/09/28 12:00 a.m.•34 views

My.WiFi USB Drive 1.0 File Inclusion

Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1589 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ==================================== 15...

7.4AI score
SaveExploits0
Rows per page
Query Builder