CVE-2016-2164

The 1 FileService.importFileByInternalUserId and 2 FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file...

Design/Logic Flaw

The 1 FileService.importFileByInternalUserId and 2 FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file...

CVE-2016-3976

Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971...

DEBIAN-CVE-2016-2097

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. dot dot in a pathname. NOTE: this vulnerability exists...

jenkins: XXE injection into job configurations via CLI (SECURITY-173)

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

The vulnerability of the SAP NetWeaver software integration platform, which allows a hacker to read arbitrary files.

The vulnerability of the Manufacturing Integration and Intelligence xMII component of the SAP NetWeaver software integration platform is related to deficiencies in name-based path restrictions. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

Cisco Prime Infrastructure XXE Denial of Service Vulnerability

Cisco Prime Infrastructure PI is a Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technology for wireless management. solution. A security vulnerability exists in Cisco PI. A remote attacker could exploit this vulnerability to read arbitrary files or cause a...

CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

DEBIAN-CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

UBUNTU-CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

CVE-2016-0481

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2015-8279

CVE-2015-8279 affects Samsung SRN-1670D Web Viewer 1.0.0.193, enabling remote arbitrary file read via an unspecified PHP script. Connected records link this to credential exposure through cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw, and to later modules describing chained access ...

batik: XML External Entity (XXE) injection in SVG parsing

It was found that batik was vulnerable to XML External Entity attacks when parsing SVG files. A remote attacker able to send malicious SVG content to the affected server could use this flaw to read files accessible to the user running the application server, and potentially perform other more...

IBM Security QRadar SIEM Directory Traversal Vulnerability

IBM Security QRadar SIEM is an IBM solution for consolidating log-sourced event data from thousands of devices and applications dispersed throughout the network. A directory traversal vulnerability exists in IBM Security QRadar SIEM 7.2.5 Patch 6 prior to the 7.2.x release. A remote attacker can...

EasyCafe Server <= 2.2.14 Remote File Read Vulnerability - Active Check

EasyCafe Server is prone to a remote file read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EasyCafe Server 2.2.14 - Remote File Read

EasyCafe Server 2.2.14 - Remote File Read !/usr/bin/python -w Title : EasyCafe Server = 2.2.14 Remote File Read Date : 25/12/2015 Author : R-73eN Tested on : Windows 7 Ultimate Software Link : http://www.tinasoft.com/easycafe/ Download Link: http://www.tinasoft.com/Download/easysetup.exe Vulnerab...

EasyCafe Server 2.2.14 - Remote File Read

!/usr/bin/python -w Title : EasyCafe Server = 2.2.14 Remote File Read Date : 25/12/2015 Author : R-73eN Tested on : Windows 7 Ultimate Software Link : http://www.tinasoft.com/easycafe/ Download Link: http://www.tinasoft.com/Download/easysetup.exe Vulnerable Versions : EasyCafe Server = 2.2.14...

EasyCafe Server 2.2.14 - Remote File Read

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : EasyCafe Server = 2.2.14 Remote File Read Date : 25/12/2015 Author : R-73eN Tested on : Windows 7 Ultimate Software Link : http://www.tinasoft.com/easycafe/ Download Link:...

EasyCafe Server 2.2.14 Remote File Read

!/usr/bin/python -w Title : EasyCafe Server = 2.2.14 Remote File Read Date : 25/12/2015 Author : R-73eN Tested on : Windows 7 Ultimate Software Link : http://www.tinasoft.com/easycafe/ Vulnerable Versions : EasyCafe Server = 2.2.14 EasyCafe Server has a feature to upload file from the server to a...