CVE-2019-9960

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path...

CVE-2019-9960

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path. Bugs...

PT-2019-19958

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 3.16.1+190225 Description The issue concerns the downloadZip function in the application/controllers/admin/export.php file, which allows a relative path. Recommendations For versions prior to 3.16.1+190225, conside...

CVE-2019-9960: Improper Limitation of a Pathname to a Restricted Directory

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path...

CVE-2018-18990: Relative Path Traversal

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process...

Joomla FPSS Art Frontpage Slideshow 1.6.0 Database Disclose / SQL Injection

Exploit Title : Joomla FPSS Art Frontpage Slideshow Components 1.6.0 Database Disclosure / Open Redirection / SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : artetics.com Software Information Link :...

Joomla ZHYandexMap 8.0.0.2 Database Disclosure

Exploit Title : Joomla ZHYandexMap Components 8.0.0.2 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomla.org Software Information Link : extensions.joomla.org/extension/zh-yandexmap/ Software Download Link :...

EMC RSA Authentication Manager < 8.4 Relative Path Traversal (DSA-2018-226)

The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4. It is, therefore, affected by a relative path traversal vulnerability in the Quick Setup component. An attacker could provide an administrator with a maliciously crafted license file to be used during the...

CVE-2018-15782

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

CVE-2018-15782 DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

PT-2019-9178

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager versions prior to 8.4 Description The issue concerns a relative path traversal vulnerability in the Quick Setup component. This could allow a local attacker to provide a crafted license, potentially granting...

CVE-2018-15782: Improper Limitation of a Pathname to a Restricted Directory

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerabilities: Improper Input Validation, Out-of-Bounds Read, Code Injection, Untrusted Pointer Dereference,...

Typo3 CMS pw_highslide_gallery 0.3.1 Database Disclosure

Exploit Title : Typo3 CMS pwhighslidegallery Extension 0.3.1 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/pwhighslidegallery/0.3.1/zip/...

Typo3 CMS twwc_pages 8.7.x Database Disclosure

Exploit Title : Typo3 CMS twwcpages Extension 8.7.x Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : gosign.de/typo3-extension/twwcpages/ Tested On : Windows and Linux Category :...

Drupal 7 CivicRM 5.8.2 Database Disclosure

Exploit Title : Drupal 7 CivicRM Modules 5.8.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : drupal.org - civicrm.org Software Download Link : download.civicrm.org/civicrm-5.8.2-drupal.tar.gz +...

WordPress Mirrorwp-Backups 4.8 Database Disclosure

Exploit Title : WordPress Mirrorwp-Backups 4.8 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : wordpress.org codecanyon.net/tags/wpmirror wpmirrorobj.com Software Download Link : N/A Tested On : Windows and...

ITAdvisorsNepal 9Qube Testimonials 1.0 Database Disclosure

Exploit Title : ITAdvisorsNepal 9Qube Testimonials Modules 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : itadvisorsnepal.com 9qube.com Software Download Link : N/A Tested On : Windows and Linux Category...

Symfony 1.4.17 Database Disclosure

Exploit Title : Symfony 1.4.17 sfDoctrinePlugin sfPropelPlugin Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 09/12/2018 Vendor Homepage : symfony-project.com symfony.com Software Download Link : symfony.com/legacy Tested On : Windows a...

WordPress NikolayDyankovDesign 2.0 Arbitrary File Disclosure

Exploit Title : WordPress NikolayDyankovDesign Themes 2.0 Arbitrary File Download Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : pinterest.com/nikolaydyankov/ nikolaydyankovdesign.com semsoft.ca Software Download Link : N/A Tested On ...