Security update for rubygem-rack-1_6

This update for rubygem-rack-16 fixes the following issues: CVE-2025-27610: Fixed improper sanitization of user-supplied paths when serving files leading to local file inclusion bsc1239298. CVE-2025-25184: Fixed Rack::CommonLogger log entry manipulation bsc1237141. Patch Instructions: To install...

PT-2025-3572 · Zenitel · Zenitel Alphaweb Xe

Name of the Vulnerable Software and Affected Versions: Zenitel AlphaWeb XE version 11.2.3.10 Description: The issue is related to a local file inclusion vulnerability. It affects the component amc uploads.php. There is no information provided about the estimated number of potentially affected...

WordPress WP Magazine Modules Lite plugin <= 1.1.2 - Authenticated Local File Inclusion vulnerability

Authenticated Local File Inclusion vulnerability discovered by stealthcopter in WordPress Plugin WP Magazine Modules Lite versions = 1.1.2...

PT-2024-13783 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo dev master commit 15fed957fb Description: A vulnerability exists in the import.json.php temporary copy functionality, allowing unrestricted PHP file uploads. This can lead to arbitrary code execution when combined with a Local Fil...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

Design/Logic Flaw

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31718

FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...

CVE-2023-31718

CVE-2023-31718 affects the open-source web-based visualization tool FUXA up to version 1.1.12 . The vulnerability is described as a Local File Inclusion via the endpoint /api/download . The connected documents confirm the affected product and the specific attack vector, but do not provide concret...

MyBB Group MyBB File Inclusion Vulnerability

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. MyBB Group A file inclusion vulnerability exists in the Admin panel Tools and Maintenance - Task...

DWebPro 8.4.2 - Multiple Vulnerabilities

DWebPro 8.4.2 - Multiple Vulnerabilities Exploit Title: DWebPro 8.4.2 Remote Binary Execution Date: 01/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://www.dwebpro.com/ Software Link:...

ViArt Shop 4.2.1 CSRF / XSS / SQL Injection / File Upload

ViArt Shop 4.2.1 Mullti Vulnerability ===================================== Author : indoushka Vondor : www.viart.com/ Dork : PHP Ecommerce Solutions by ViArt ========================================= XSS : C:\AppServ\www\viart\articlesrss.php Line : 190 echo $xml Remote/Local File Inclusion :...

BaconMap 1.0 - Local File Disclosure Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........Local File Inclusion Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested...

PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PCPIN Chat = 5.0.4 \login/language\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n; echo dork: \powered by...

phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPWebSite = 0.10.2 remote cmmnds xctn\r\n; echo - arbitrary local inclusion, works with magicquotesgpc = Off\r\n; echo by rgod, mail: [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc4...

NOCC Webmail <= 1.0 (Local Inclusion) Remote Code Execution Exploit

No description provided by source. ?php ---noccw10inclxpl.php 8.22 23/02/2006 NOCC Webmail = 1.0 remote commands execution exploit through arbitrary local inclusion & attachment filename prediction coded by rgod site: http://retrogod.altervista.org - works regardless of any magicquotesgpc setting...

phpmychat plus 1.94 rc1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Link:...

Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 lngfile ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected]...

gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo gCards = 1.45 multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo Sun-Tzu:\At first, then, exhibit the coyness of a maiden, until the\r\n; echo enem...

XMB <= 1.9.6 Final basename() Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by XMB\n\n; / works...