4348 matches found
Joomla DVFolderContent 1.0.2 Local File Disclosure Vulnerability
Exploit for php platform in category web applications Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date...
OLX: Full path disclosure vulnerability at http://corporate.olx.ph
Hello Security team, Request: if you think the reported issues have acceptable risk and you are not going to make changes then kindly request to mark as Informative or let me close it. I'm not sure if this is the normal behavior of the page, but i thought i would be a good idea reporting to you...
KLA10876 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper value...
Jobberbase 2.0 Disclosure / XSS / Code Execution / Upload
Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
Jobberbase 2.0 - Multiple Vulnerabilities
Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
Jobberbase 2.0 - Multiple Vulnerabilities
Jobberbase 2.0 - Multiple Vulnerabilities Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
Jobberbase 2.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
QIWI: [id.rapida.ru] Full Path Disclosure
Уязвимый сценарий: dp.php Включено отображение подробной информации об ошибках. При использовании массива вместо строки выводится полный путь до веб директории. Примеры путей: ██████████████████ ███████ █████████ Примеры запросов: Пример 1 нужно подставить валидное значение сессии http POST /dp.p...
MGASA-2016-0291 Updated phpmyadmin packages fix security vulnerability
In phpMyAdmin before 4.4.15.8, the decryption of the username/password is vulnerable to a padding oracle attack. The can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Also, the same initialization vector IV is used to hash the username and...
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2016:2168-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for phpMyAdmin (important)
phpMyAdmin was updated to version 4.4.15.8 2016-08-16 to fix the following issues: - Upstream changelog for 4.4.15.8: Improve session cookie code for openid.php and signon.php example files Full path disclosure in openid.php and signon.php example files Unsafe generation of BlowfishSecret when no...
FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)
The phpmyadmin development team reports : Weakness with cookie encryption Multiple XSS vulnerabilities Multiple XSS vulnerabilities PHP code injection Full path disclosure SQL injection attack Local file exposure Local file exposure through symlinks with UploadDir Path traversal with SaveDir and...
phpmyadmin -- multiple vulnerabilities
The phpmyadmin development team reports: Weakness with cookie encryption Multiple XSS vulnerabilities Multiple XSS vulnerabilities PHP code injection Full path disclosure SQL injection attack Local file exposure Local file exposure through symlinks with UploadDir Path traversal with SaveDir and...
OLX: full path disclosure vulnerability at https://security.olx.com/*
in form of html comment it disclosing full path of file name Security.html in all https://security.olx.com/ links...
WordPress Count Per Day Plugin <= 3.2.3 - Full Path Disclosure
This plugin is prone to multiple script direct request path disclosure vulnerability. Solution Update the plugin...
Instacart: Image Upload Path Disclosure
Hi, Firstly,I couldn't see anything about Path Disclosure in your policy,so I've decided to report it. Steps to reproduce : 1-Create a list for a store 2-Add background image from link File has to be .svg like aaa.com/aaa.svg 3-Then it will give an error Let's take a look to that error...
Shopify: (FULL PATH DISCLOSURE) Unknown MySQL server host 'shardm-reader.chi2.shopify.io'
Hello, Found a website of you guys that is poiting to: shardm-reader.chi2.shopify.io' This domain is disclosure fill path because there is none MySQL server host. POC: https://104.196.154.1/ Response a whole page with path disclosures: lib/patches/mysqlmonitoring.rb:19:in connect'...
Ian Dunn: [Not just a server configuration issue] Full Path Disclosure
Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...
Joomla com_jotloader 2.2.1 website path disclosure vulnerability
No description provided by source...
Full path disclosure
PMASA-2016-33 Announcement-ID: PMASA-2016-33 Date: 2016-07-12 Summary Full path disclosure Description A full path disclosure vulnerability was discovered where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. Severity We consider...