CVE-2017-2181

CVE-2017-2181 affects the Hands-on Vulnerability Learning Tool “AppGoat” Web Application, versions 3.0.2 and earlier. The provided documents state a vulnerability that allows remote attackers to obtain local files via unspecified vectors. The root cause, exact exploit path, affected components, a...

CVE-2017-2180

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors...

CVE-2017-2180

CVE-2017-2180 affects AppGoat, a Hands-on Vulnerability Learning Tool for Web Application (versions 3.0.2 and earlier). The vulnerability is an information disclosure flaw where, by visiting a specially crafted URL, an attacker can obtain a local file specified by the attacker. The issue is confi...

PT-2017-15239

Name of the Vulnerable Software and Affected Versions AppGoat versions 3.0.2 and earlier Description The issue allows remote attackers to obtain local files via unspecified vectors. Recommendations For AppGoat versions 3.0.2 and earlier, at the moment, there is no information about a newer versio...

Odoo Directory Traversal Vulnerability

Odoo formerly known as OpenERP is an enterprise resource planning ERP and customer relationship management CRM system. The system is developed using Python language , PostgreSQL as the database , and includes modules such as sales management , inventory management , financial management , and...

PT-2017-2214

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an Untrusted Pointer Dereference in the TrustZone component of the Android operating system. This could potentially allow a remote attacker to access local files due t...

Directory traversal

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

PT-2017-18905

Name of the Vulnerable Software and Affected Versions Odoo versions 8.0 through 10.0 Description The issue allows remote authenticated users to read arbitrary local files readable by the Odoo service due to a directory traversal vulnerability in tools.file open. Recommendations For Odoo versions...

libav: Multiple vulnerabilities

Background Libav is a complete solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in libav. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media...

Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird 52.1,...

KLA11005 Multiple vulnerabilities in Oracle Java SE

Multiple serious vulnerabilities have been found in Oracle Java SE components. Malicious users can exploit these vulnerabilities to cause a denial of service, read and write local files and possibly to obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unspecified...

KLA11028 A read/write local files vulnerability in Oracle VM Virtual Box

An unspecified vulnerability was found in Oracle VM VirtualBox. By exploiting this vulnerability low priveleged malicious users with logon to the infrastructure, where OracleVM VirtualBox is executed, can write to some of Oracle VM VirtualBox accessible data and read a subset of Oracle VM...

Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird 52.1,...

KLA11004 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause a denial of service, spoof user interface, obtain sensitive information, execute arbitrary code, perform cross-site scripting attacks, bypass...

Mozilla Firefox webkitdirectory local files disclosure (CVE-2017-5414)

I have reported three different bugs to Mozilla in the webkitdirectory feature. Luckily the folder picker was only implement in Mozilla's Nightly browser, which is meant to test out new features before landing in the stable version. Bug 1295914 - webkitdirectory could be used to trick users into...