Localize: Sensitive file

A possible sensitive file has been found. This file is not directly linked from the website. This check looks for common sensitive resources like password files, configuration files, log files, include files, statistics data, database dumps. Each one of these files could help an attacker to learn...

CVE-2014-2873

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file...

Authentication flaw

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file...

CVE-2014-2873

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file...

CVE-2014-2873

CVE-2014-2873 affects PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3, where log files are accessible without authentication. The root cause is missing authentication for access to log files, enabling remote attackers to obtain sensitive server information by requesting files with a pr...

CVE-2014-2873: Exposure of Sensitive Information to an Unauthorized Actor

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file...

cPanel多个安全漏洞

cPanel是一款基于多种语言的空间管理面板，可通过域名来管理整个站点。 cPanel存在多个安全漏洞： 1，部分日志文件以全局可读权限创建，允许攻击者查看日志文件获取敏感信息。 2，提交给FormMail.pl的输入在重定向用户之前缺少校验，可重定向用户至任意WEB站点。 3，在Cpanel::API::Fileman中生成错误消息时Locale::Maketext::maketext存在错误，允许攻击者提交特制输入可执行任意代码。 4，在某些情况下会在HOME文件创建trackupload日志，可通过符号链接攻击覆盖文件。...

[SkypeLogView] Skype Log Viewer (.dbb and main.db files)

SkypeLogView reads the log files created by Skype application, and displays the details of incoming/outgoing calls, chat messages, and file transfers made by the specified Skype account. You can select one or more items from the logs list, and then copy them to the clipboard, or export them into...

JBoss Enterprise Application Platform明文密码本地信息泄漏漏洞

Bugtraq ID:65762 CVE ID:CVE-2014-0058 JBOSS是一个基于J2EE的开放源代码的应用服务器。 JBoss Enterprise Application Platform的安全审核功能会以明文方式记录请求参数，当使用BASIC或者基于FORM的验证时会记录敏感信息，可访问日志文件的攻击者可获取敏感信息。 0 JBoss Enterprise Application Platform 6.2.1 厂商补丁： JBOSS ----- 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

CVE-2014-0058

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

Input validation

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

CVE-2014-0058

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

PT-2014-3455

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions 6.x before 6.2.1 Description The security audit functionality logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

CVE-2012-6108

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

Code injection

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

CVE-2012-6108

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

CVE-2012-6108

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

CVE-2012-6108

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

CVE-2012-6108: Undefined Security Weakness

HP Linux Imaging and Printing HPLIP before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations...

PT-2014-2369

Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing HPLIP versions prior to 3.13.2 Description The issue allows local users to delete log files due to world-writable permissions for /var/log/hp and /var/log/hp/tmp. Recommendations For versions prior to 3.13.2, upda...