CVE-2019-18997

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...

Buffer overflow vulnerability in libming 'readBytes' function

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A buffer overflow vulnerability exists in the 'readBytes' function of the util/read.c file in libming 0.4.8 and earlier. No detailed vulnerability details are provided at...

X3.4 suffers from arbitrary file reading vulnerability

Discuz! is a general-purpose community forum software system. X3.4 has an arbitrary file reading vulnerability that can be exploited by attackers to read file information...

EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)

According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by th...

EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-1741)

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system allows a hacker to gain access to read and write file data.

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in the control of input data within the driver. Exploiting this vulnerability can allow attackers to gain access to read and write file data...

EulerOS 2.0 SP5 : gimp (EulerOS-SA-2019-1675)

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...

CVE-2017-9382

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "file" as one of the service actions for a normal...

CVE-2019-8999

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

The vulnerability of the kernel_read_file function in Linux kernels, related to improper memory release before deleting last references, allows a malicious actor to trigger a service failure.

The vulnerability of the kernelreadfile function in the Linux operating system’s kernel is related to a memory leak in the implementation of the vfsread handler. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...

Linux/x86 Read /etc/passwd Shellcode 58 bytes

/ Shellcode Title: Linux/x86 - Read File /etc/passwd 58 bytes. NULL byte free Author: Kiewicz @Kiewicz Homepage: https://0xkiewicz.github.io Tested on: Debian/x86 gcc -o shellcode -z execstack -fno-stack-protector shellcode.c PA-7854 / / $ objdump -d -M intel readfile readfile: file format...

Linux/x86 - Read File (/etc/passwd) MSF Optimized Shellcode (61 bytes)

/ Shellcode Title: Linux/x86 - Read File /etc/passwd MSF Optimized Shellcode 61 bytes Author: Ray Doyle @doylersec Homepage: https://www.doyler.net Tested on: Linux/x86 gcc -o readfileshellcode -z execstack -fno-stack-protector readfileshellcode.c / / Disassembly of section .text: 08048060 :...

Linux/x86 - Read File (/etc/passwd) + MSF Optimized Shellcode (61 bytes)

Linux/x86 - Read File /etc/passwd + MSF Optimized Shellcode 61 bytes. Shellcode exploit for Linuxx86 platform / Shellcode Title: Linux/x86 - Read File /etc/passwd MSF Optimized Shellcode 61 bytes Date: 2018-09-13 Author: Ray Doyle @doylersec Homepage: https://www.doyler.net Tested on: Linux/x86 g...

DEBIAN-CVE-2018-16424

A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

UBUNTU-CVE-2018-16424

A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

cmft Denial of Service Vulnerability

cmft is a set of cross-platform for filtering stereo mapping open source command line tools . A security vulnerability exists in the 'cmft::rwReadFile' function in the image.cpp file in cmft 2017-09-24 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of...

Design/Logic Flaw

GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...

CVE-2018-3731

public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path...

Linux/x86-64 - Read /etc/passwd Shellcode (82 bytes)

BITS 64 ; Author Mr.Un1k0d3r - RingZer0 Team ; Read /etc/passwd Linux x8664 Shellcode ; Shellcode size 82 bytes global start section .text start: jmp pushfilename readfile: ; syscall open file pop rdi ; pop path value ; NULL byte fix xor byte rdi + 11, 0x41 xor rax, rax add al, 2 xor rsi, rsi ; s...

The vulnerability of the CInArchive::ReadFileItem method (Archive/Udf/UdfIn.cpp) in the p7zip archive tool allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the CInArchive::ReadFileItem method Archive/Udf/UdfIn.cpp in the p7zip archive tool is caused by the occurrence of read operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...