3734 matches found
CreateSupportZipAction directory traversal
There’s a directory traversal vulnerability in the CreateSupportZipAction action that allows a malicious user to include arbitrary log files into a support zip. This is because the SupportUtility object is marked as @ParameterSafe, and no validation is performed on its serverLogsDirectory path...
KingView Log File Parsing Buffer Overflow
This module exploits a vulnerability found in KingView use exploit/windows/fileformat/kingview/kingmesskvl msf undefinedkingmesskvl show actions ...actions... msf undefinedkingmesskvl set ACTION msf undefinedkingmesskvl show options ...show and set options... msf undefinedkingmesskvl run This...
Microsoft Internet Information Services security vulnerabilities
log files information leakage, FTP STARTTLS session command injection...
Monaca Debugger for Android information management vulnerability
Overview Monaca Debugger for Android contains an information management vulnerability. Monaca Debugger provided by Asial Corporation contains an issue where account information of the product or other information such as session IDs are saved in a log file. KuMaGa ShiRoIHi reported this...
JVN#56923652: Monaca Debugger for Android information management vulnerability
Monaca Debugger provided by Asial Corporation contains an issue where account information of the product or other information such as session IDs are saved in a log file. Impact Android applications with permissions to read system log files may obtain users credentials of Monaca or other...
CVE-2012-4940
The Axigen Free Mail Server is vulnerable to multiple directory traversal flaws within the View Log Files component. The root cause is the failure of the index.hsp script to properly sanitize user input, specifically the fileName parameter. Remote attackers can use .. sequences to read or delete ...
CVE-2012-4940: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in 1 the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in 2 an...
PT-2012-5674
Name of the Vulnerable Software and Affected Versions Axigen Free Mail Server affected versions not specified Description The issue concerns multiple directory traversal vulnerabilities in the View Log Files component. These vulnerabilities allow remote attackers to read or delete arbitrary files...
Visual Tools DVR multiple vulnerabilities
Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...
Visual Tools DVR Command Injection / Password Disclosure
Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...
Visual Tools DVR Command Injection / Password Disclosure
Exploit for hardware platform in category web applications Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Statu...
Visual Tools DVR3.0.6.16_ vx series 4.2.19.2 - Multiple Vulnerabilities
Exploit Title: Visual Tools DVR multiple vulnerabilities Date: 2012-10-15 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.visual-tools.com/ Version: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Tested on: VS Series 3.0.6.16/VX Series 4.2.19.2 Visual Tools develops, manufactures and...
CVE-2012-3743
The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files...
PT-2012-4449
Name of the Vulnerable Software and Affected Versions Siemens WinCC versions 7.0 SP3 and earlier Description The issue allows remote attackers to read sensitive files due to insufficient access control. This can include reading 1 log files or 2 configuration files via a direct request...
akcms 4.2.4 - Information Disclosure
akcms 4.2.4 - Information Disclosure Exploit Title: akcms v4.2.4 Information Disclosure Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.akcms.com/ Software Link:...
akcms 4.2.4 - Information Disclosure
Exploit Title: akcms v4.2.4 Information Disclosure Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.akcms.com/ Software Link: http://download.akcms.com/download/akcms4.2.4.tar.gz Version: 4.2.4 may be o...
WS-2012-0026
In “signalapp/Signal-Android” versions before 0.9.9.1 writes sensitive information such as cleartext MMS messages into log files...
CVE-2012-0813
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information...
