200 matches found
WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion
Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...
CVE-2016-9497
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many...
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...
PT-2017-18146
Name of the Vulnerable Software and Affected Versions HedEx versions earlier than V200R006C00 Description The issue is related to a dynamic link library DLL hijacking vulnerability. This occurs because the software calls a DLL file by accessing a relative path, allowing an attacker to potentially...
A simple description of the Fckeditor upload parsing vulnerability-vulnerability warning-the black bar safety net
Directly through the known path to the file that broke the fck Editor Version information: FCKeditor/whatsnew.html ! 2 0 1 6 0 8 2 3 1 9 2 4 0 8 Through a common upload address, to test the upload point whether the presence of: FCKeditor/editor/filemanager/browser/default/connectors/asp/connector...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
MGASA-2015-0231 Updated php packages fix security vulnerabilities
Updated php packages fix security vulnerabilities: Memory Corruption in pharparsetarfile when entry filename starts with null CVE-2015-4021. Integer overflow in ftpgenlist resulting in heap overflow, potentially exploitable by a hostile FTP server CVE-2015-4022. PHP Multipart/form-data parsing...
Multiple Websense Product 'explorer_wse' Path Access Bypass Vulnerabilities
Websense, Inc. NASDAQ: WBSN is the world's leading provider of integrated Web, information and data security protection solutions. Multiple Websense products are vulnerable to an "explorerwse" path access bypass vulnerability. This vulnerability allows attackers to bypass certain security...
FileBug v1.5.1 iOS - Directory Traversal Vulnerability
Document Title: =============== FileBug v1.5.1 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1342 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 134...
OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not...
OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not...
File input control has access to full path — Mozilla
Mozilla security researcher mozbugra4 reported a mechanism to exploit the control when set to the file type in order to get the full path. This can lead to information leakage and could be combined with other exploits to target attacks on the local file system...
curl: local file access via unsafe redirects
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to 1 trigger arbitrary requests to intranet servers, 2 read or overwrite arbitrary files via a redirect to a file:...
CVE-2006-3682
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the 1 year, 2 pluginmode or 3 month parameters...
File absolute path to access that support non-８ ０ port-vulnerability warning-the black bar safety net
Get the current asp implementation file where the absolute path support with port absolute path to/end in solving some ofXMLdocuments called useful． Or applied to the thief program, the program is as follows //poweredBy Airzen //qq:3 9 1 9 2 1 7 0 //e mail:[email protected] //date:2004-12-03 //repo...
.Net server form authentication protection bypass
By using backslash in the request path it's possible to access protected file...
Ultraseek special DOS device access
Document path can contain special device name...
ACI 4D WebServer Directory traversal.
vendor: http://www.4d.com/ current version: 6.7 tested version: 6.57 , others? This directory transversal hole seems to work on ACI 4d webserver running on the NT platform. I would imagine exploitation on a macos box would be similar but would require the proper mac filesystem path to the file yo...
Vulnerability in Soft Lite ServerWorx
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in Soft Lite ServerWorx Overview Soft Lite ServerWorx v3.00 is a web server available from http://www.zdnet.com and http://www.softlite.net. A vulnerability exists which allows a remote user to break out of the web roo...
