Netscape Communicator 4.x URL Read Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and...

LPPlus 3.2.2/3.3 dccscan unprivileged read vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1644/info $LPHOME/bin/dccscan is suid-root and can be executed by any user. It is possible for an unprivileged user to print files to which he does not have read access. In testing, this works even for printers to which t...

Destoon 20140530最新版超全局变量覆盖导致的安全问题(官方demo演示)

简要描述： 短时间没找到合适的注入 找了个任意文件读取发上来了 详细说明： 代码片段0x1 /common.inc.php行17 None 这里用$GET配合上传unset了$FILES然后在extract$POST的时候重新初始化了$FILES 随便选个文件提交拦下数据包 修改 Content-Disposition: form-data; name="file"; filename="" 中的filename字段为空 如图就返回了我们要读取的文件了 漏洞证明：...

libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

CVE-2014-0134

The instance rescue mode in OpenStack Compute Nova 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and usecowimages is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image...

CVE-2014-2383

dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the...

CVE-2014-2383

Dompdf vulnerability CVE-2014-2383 (affecting dompdf/dompdf) is an input_file local file inclusion when DOMPDF_ENABLE_PHP is enabled, allowing context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP stream (e.g., php://filter/read=convert.base64-encode/resource...

dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read

Vulnerability title: Arbitrary file read in dompdf CVE: CVE-2014-2383 Vendor: dompdf Product: dompdf Affected version: v0.6.0 Fixed version: v0.6.1 partial fix Reported by: Alejo Murillo Moyas Details: An arbitrary file read vulnerability is present on dompdf.php file that allows remote or local...

Han Edition through JCMS database configuration file read vulnerability-vulnerability warning-the black bar safety net

Due to read the xml file when not to pass into the parameters for the filter, the flowcode parameters can be controlled, 配置文件地址WEB-INF/config/dbconfig.xml due to the control of the file suffix, can only read the xml file EXP:http://www. iswin. org/jcms/workflow/design/readxml. jsp?...

OpenJDK: image conversion out of bounds read (2D, 8014102)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

CVE-2013-5328

Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors...

OpenJDK: image conversion out of bounds read (2D, 8014102)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

OpenJDK: image conversion out of bounds read (2D, 8014102)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

magento 1.7.0.1 /lib/Zend/XmlRpc/Request.php 任意文件读取漏洞

No description provided by source...

Timor friends P2P lending system arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Using this system site the back plus the index. php? plugins&q=imgurl&url=QGltZ3VybEAvY29yZS9jb21tb24uaW5jlnboca== Can broke database related information...

Cisco WebEx未初始化内存读取漏洞

BUGTRAQ ID: 59649 CVECAN ID: CVE-2013-1232 WebEx会议服务是Cisco WebEx管理和维护的托管多媒体会议解决方案。 多个Cisco WebEx产品上的Cisco IOS处理HTTP请求时存在错误，通过发送特制的请求到Cisco WebEx节点，未经身份验证的远程攻击者可利用此漏洞读取未初始化的内存。 0 Cisco IOS 15.3 Cisco WebEx 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1232）以及相应补丁: CVE-2013-1232：Cisco WebEx...

CVE-2013-3336

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors...

Design/Logic Flaw

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion XEE attack...

trs inforadar arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Brief description: Doing projects found inforadar arbitrary file read vulnerability Detailed description: Doing projects found inforadar arbitrary file read vulnerability /inforadar/jsp/file/filedownload. jsp? fileType=file&fileName=../../../../../../../../../../../../../../etc/passwd Vulnerabili...

CVE-2012-5574

CVE-2012-5574 affects Symfony CMS: lib/form/sfForm.class.php before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request, enabling information disclosure. The entry is confirmed across multiple feeds (NVD, Gentoo GLSA 201405-25, OpenVAS entries) and remediation is t...