apache tomcat < 6.0.18 utf8 - Directory Traversal vulnerability

No description provided by source. Title: Apache Tomcat Directory Traversal Vulnerability Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote File Disclosure Vulnerable Version: prior to 6.0.18 Solution: - Best Choice: Upgrade to 6.0.18 http://tomcat.apache.o...

Castor Library XXE Disclosure

Castor Library Default Configuration could lead to XML External Entity XXE Attack Vulnerability Type: Local or Remote File Disclosure Reporter: Ron Gutierrez [email protected] and Adam Bixby [email protected] Company: Gotham Digital Science [email protected] Affected Software:...

Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter

It was found that the ParserPool and Decrypter classes in the OpenSAML Java implementation resolved external entities, permitting XML External Entity XXE attacks. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform oth...

WordPress DZS Video Gallery 3.1.3 Remote File Disclosure

Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File: preview.php Date: 03/12/2013 Explo...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage:...

Seowonintech Devices - Remote Command Execution

!/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com ===================================================== type: | platform: | description:...

Buffalo LinkStation Direct Request Remote File Disclosure

The web server included with the remote Buffalo LinkStation device does not properly configure access rights, which allows an unauthenticated remote attacker to gain access to sensitive files such as the device's private RSA key. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Web Cookbook File Disclosure / SQL Injection

Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

Web Cookbook File Disclosure / SQL Injection Vulnerabilities

Web Cookbook suffers from file disclosure and remote SQL injection vulnerabilities. Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection...

Web Cookbook - Multiple Vulnerabilities

Web Cookbook - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

Web Cookbook - Multiple Vulnerabilities

Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

Omni-Secure 5 / 6 / 7 Remote File Disclosure

Omni-Secure versions 5, 6, and 7 suffer from a remote file disclosure vulnerability. Remote File Discloure "Omni-secure" version 5 / 6 / 7 Viva Egypt & Grief and sorrow for the disaster Assiut, fUCK U QANDIL Greetz to : EL MOGHAZY & EL Mery Author:Mohamed Gaber "HackerEgy in the paste : " email...

Samsung Galaxy SII - Mdnie_Tune_Files_Root - Remote File Disclosure

Exploit for hardware platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

WordPress Plugin Cloudsafe365 - file Remote File Disclosure

WordPress Plugin Cloudsafe365 - file Remote File Disclosure source: https://www.securityfocus.com/bid/55241/info The Cloudsafe365 plugin for WordPress is prone to a file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability ...

WordPress Cloud Safe 365 Plugin - Remote File Disclosure

Cloud Safe 365 plugin is prone to a remote file disclosure vulnerability. It allows an attacker to view local files in the context of the web server process. Other attacks are also possible. Solution Update the plugin...

WordPress Cloudsafe365 Plugin 'file' Parameter Remote File Disclosure Vulnerability

The Cloudsafe365 plugin for WordPress is prone to a file- disclosure vulnerability because it fails to properly sanitize user- supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

WeBid 'getthumb.php' Remote File Disclosure Vulnerability

WeBid is prone to a remote file-disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Rama Zeiten CMS - download.php Remote File Disclosure

Rama Zeiten CMS - download.php Remote File Disclosure source: https://www.securityfocus.com/bid/54467/info Rama Zeiten CMS is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files i...

Rama Zeiten CMS Remote File Disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Rama Zeiten CMS - 'download.php' Remote File Disclosure

source: https://www.securityfocus.com/bid/54467/info Rama Zeiten CMS is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid...