DEBIAN-CVE-2014-5030

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on 1 index.html, 2 index.class, 3 index.pl, 4 index.php, 5 index.pyc, or 6 index.py...

CVE-2014-5030

CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on 1 index.html, 2 index.class, 3 index.pl, 4 index.php, 5 index.pyc, or 6 index.py...

PicketLink: XXE via insecure DocumentBuilderFactory usage

It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the...

EggAvatar 2.3.2 for vBulletin 3.8.x Local File Read

No description provided by source. !/usr/bin/env perl use LWP::UserAgent; sub banner print \n; print DSecurity \n; print \n; print Email:dsecurity.vnatgmail.com \n; print \n; if@ARGV2 print Usage: $0 address filename\n; print Example: $0 http://localhost/vbb test test index.php\n; exit;...

CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option...

CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option...

Design/Logic Flaw

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

MGASA-2013-0377 Updated fcron package fixes security vulnerability and init script

fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file CVE-2010-0792. An error in the init script as also been corrected...

DEBIAN-CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

Xxe

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

open_basedir after there may be security risks-vulnerability warning-the black bar safety net

The current php site security configuration is substantially openbasedir+safemode, it is indeed very invincible, very safe, even when permission is not a good environment settings, so the configuration is quite safe, and, of course, does not consider some of the you can bypass. This article...

CVE-2012-3866

lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for lastrunreport.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file...

Scientific Linux Security Update : curl on SL3.x, SL4.x, SL5.x i386/x86_64

David Kierznowski discovered a flaw in libcurl where it would not differentiate between different target URLs when handling automatic redirects. This caused libcurl to follow any new URL that it understood, including the 'file://' URL type. This could allow a remote server to force a local...

XML Vulnerability in Crowd

We have identified and fixed a vulnerability in Crowd that results from the way XML parsers are used. This vulnerability allows an attacker to: Execute denial of service attacks against the Crowd server, or Read all local files readable to the system user under which Crowd runs. All versions of...

SAP Application Administration - local file read

Application: SAP NetWeaver Vendor URL: Bugs: Local file read Risk: High Exploits: YES Reported: 14.03.2011 Vendor response: 15.03.2011 Date of Public Advisory: 17.02.2012 Reference: SAP Security Note 1585527 Description SAP NetWeaver 7.0 Application Administration com.sap.ipc.webapp.ipc has local...

EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read

EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; print "\n\n"; print " EggAvatar for vBulletin 3.8.x local...

EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; print "\n\n"; print " EggAvatar for vBulletin 3.8.x local file read \n"; print " Date:07-03-2011 \n"; print "...

DEBIAN-CVE-2010-3316

The runcoprocess function in pamxauth.c in the pamxauth module in Linux-PAM aka pam before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pamxauth PAM check...

ShopEx 网上 商店 系统 /shopadmin/index.php local file read vulnerability-vulnerability warning-the black bar safety net

ShopEx Online Store platform software system, also known as shop management system, online program, online shopping system, online shopping system. index. php in the parameters of the process exists the local file reading vulnerability Test code:...

cyask of a local file read exploit-vulnerability warning-the black bar safety net

By:linkboy Yesterday in the evening saw one such article, but no one said the use of the method, your own research a bit, the original is so simple. The following is the article content. Afternoon to help colleagues to see a station, DZ Forum, the Supplement are up, we also didn't ring day Then...