977 matches found
MDaemon Mailer Daemon 11.0.1 File Disclosure
MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...
Sun Java System Web Server WebDAV请求远程文件泄露漏洞
BUGTRAQ ID: 39187 Sun Java System Web Server是高性能的WEB服务器。 Sun Java System Web Server的WebDAV实现在处理LOCK请求时存在错误，远程攻击者可以通过向服务器发送定义外部XML实体的特制LOCK命令导致泄漏任意本地文件的内容。成功攻击要求用户拥有WebDAV写访问权限。 Sun Java System Web Server 7.0 Update 4 厂商补丁： Sun --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Cru Content CMS remote file disclosure vulnerability
Exploit for unknown platform in category web applications ==================================================== Cru Content CMS remote file disclosure vulnerability ==================================================== "Cru Content" Remote File Download Vulnerability CMS Site:crudigital.com.au...
openSUSE Security Update : finch (finch-2032)
This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...
openSUSE Security Update : finch (finch-2032)
This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...
SuSE 11 Security Update : pidgin (SAT Patch Number 2019)
This update of pidgin fixes various security vulnerabilities : - Remote file disclosure vulnerability by using the MSN protocol. CVE-2010-0013: CVSS v2 Base Score: 4.3 : Path Traversal CWE-22 - MSN protocol plugin in libpurple allowed remote attackers to cause a denial of service memory corruptio...
Fonts Site Script Remote File Disclosure
=---------------------------------------------= = ,.:oO0^-^0Oo:., = = JIKO = = '':0Oov-voO0:'' = =---------------------------------------------= ----------------------=JIKO=------------------- | Autor : jiko | Home : WwW.No-Exploit.CoM | | Bug : Remote File Disclosure Vulnerability | Vendor :...
Fonts Site Script - Remote File Disclosure
Fonts Site Script - Remote File Disclosure =---------------------------------------------= = ,.:oO0^-^0Oo:., = = JIKO = = '':0Oov-voO0:'' = =---------------------------------------------= ----------------------=JIKO=------------------- | Autor : jiko | Home : WwW.No-Exploit.CoM | | Bug : Remote...
Fonts Site Script Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================== Fonts Site Script Remote File Disclosure Vulnerability ====================================================== | Exploit: .:|http://localhost/Script/classes/viewfile.php?f=file base64...
Fonts Site Script - Remote File Disclosure
=---------------------------------------------= = ,.:oO0^-^0Oo:., = = JIKO = = '':0Oov-voO0:'' = =---------------------------------------------= ----------------------=JIKO=------------------- | Autor : jiko | Home : WwW.No-Exploit.CoM | | Bug : Remote File Disclosure Vulnerability | Vendor :...
Mongoose 2.8 - Space String Remote File Disclosure
Mongoose 2.8 - Space String Remote File Disclosure source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of file...
httpdx Space Character Remote File Disclosure Vulnerability
httpdx is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks. httpdx 1.5 is affected; other...
httpdx 1.5 'Space Character' Remote File Disclosure Vulnerability
httpdx is prone to a remote file disclosure vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
The Uploader 2.0 File Disclosure
Title: The Uploader 2.0 Remote File disclosure Vulnerability Author: Stack http://server/theuploader/api/downloadchecker.php?filename=../config.inc.php next open the config.inc.php file and you got the MySQL configuration user & password :d //MySQL configuration and connection functions...
Simple Machines Forum XSS / XSRF / PHP Execution
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
ISPworker 1.23 - Remote File Disclosure
ISPworker 1.23 - Remote File Disclosure Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd...
ISPworker <= 1.23 Remote File Disclosure exploit
Exploit for unknown platform in category web applications ================================================ ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00...
ISPworker <= 1.23 Remote File Disclosure exploit
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker = 1.23 Remote File Disclosure exploit Download Script : http://www.ispware.de/files/ispworker-1.23.tar.gz Dork : die"lamers attempt"; :P Vuln : ./ispworker-1.23/files/ispworker/module/ticket/download.php...
ISPworker 1.23 - Remote File Disclosure
Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo /...