PT-2020-1978

Name of the Vulnerable Software and Affected Versions SiTex affected versions not specified Description The issue is related to the file upload mechanism on the SiTex platform, which lacks input data sanitization. This could allow a remote attacker to upload malicious files to the server...

CVE-2012-4919

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

Remote file inclusion

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

CVE-2012-4919

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

CVE-2012-4919

The CVE-2012-4919 entry applies to the WordPress Gallery Plugin (Gallery Plugin for WordPress). The vulnerability is a Remote File Inclusion via the load parameter of the update_order.php script, caused by insufficient input validation. This allows an unauthenticated, remote attacker to include a...

PT-2020-7246

Name of the Vulnerable Software and Affected Versions: Gallery Plugin for WordPress version 1.4 Description: The issue is related to a Remote File Include Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

CVE-2012-4919: Inclusion of Functionality from Untrusted Control Sphere

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

Shell Backdoor List - PHP / ASP Shell Backdoor List

What is a shell backdoor ? A backdoor shell is a malicious piece of code e.g. PHP, Python, Ruby that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own. How to...

Remote file inclusion

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1...

CVE-2014-5238

XML external entity XXE vulnerability in Open-Xchange OX AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document...

CVE-2020-6167

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

CVE-2020-6167

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

PT-2020-18977

Name of the Vulnerable Software and Affected Versions Minimal Coming Soon & Maintenance Mode versions 2.10 and earlier Description A flaw in the Minimal Coming Soon & Maintenance Mode plugin allows a CSRF attack, enabling an attacker to enable maintenance mode, inject XSS, modify important...

Unauthorized Remote File Access

libcurl.so is vulnerable to unauthorized remote file access. Lack of input validation allows an attacker to access a remote file using SMB via a URL containing FILE:. This vulnerability affects Windows only...

CVE-2019-11993

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...

PT-2019-15796

Name of the Vulnerable Software and Affected Versions Simplifile RecordFusion versions prior to 2019-11-25 Description The issue allows remote attackers to access local files. This is achieved through the logs and hist parameters in the logger/logs or logger/hist URI, such as "logger/logs?/../" o...

Squiz Matrix CMS PHP Object Arbitrary Deserialization Vulnerability

Squiz Matrix CMS is an open source content management system with a highly usable interface. Squiz Matrix CMS suffers from an arbitrary PHP object deserialization vulnerability, which can be exploited to trigger arbitrary deserialization of PHP objects from the...

PT-2019-6063 · Qnap · Qnap Photo Station

Name of the Vulnerable Software and Affected Versions: QNAP Photo Station affected versions not specified Description: The issue allows remote attackers to access or modify system files due to an external control of file name or path vulnerability. This vulnerability is related to incorrect...

EulerOS 2.0 SP2 : lftp (EulerOS-SA-2019-2485)

According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the...

Skia Library Arbitrary File Write

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...