IBM Tivoli Lightweight Infrastructure Directory Traversal Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. IBM Tivoli Lightweight Infrastructure also known as LWI is a lightweight architecture. A directory traversal vulnerability exists in Eclipse Help in IBM Tivoli LWI used in IBM AIX versions 5.3, 6.1 and...

CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

CVE-2016-6408

Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCvb17814...

Cisco IOS and IOS XE Software Application-Hosting Framework Unauthorized File Access Vulnerability

Cisco IOS and IOS XE Software are operating systems developed by Cisco in the United States for its network devices. An unauthorized file access vulnerability exists in the Application-Hosting Framework component of Cisco IOS and IOS XE Software. When the Iox feature setting is enabled, a remote...

Cisco Prime Home XML External Entity Injection Vulnerability

Cisco Prime Home is a standards-based remote management and configuration solution. An XML external entity injection vulnerability exists in the Web-Based user interface of Cisco Prime Home version 5.2.0. A remote attacker could exploit this vulnerability by sending a specially crafted XML file t...

IBM Security Privileged Identity Manager Virtual Appliance Directory Traversal Vulnerability

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

AnoBBS Remote File Inclusion Vulnerability

AnoBBS is an encrypted electronic notice board system. A remote file inclusion vulnerability exists in the progdir= parameter of the bbsauth.php page in AnoBBS version 1.0.1, which can be exploited by an attacker to obtain sensitive information...

Multiple Vulnerabilities in iStArtApp FileXChange

FileeXChange is a handy file manager for iPhone, iPod Touch and iPad. iStArtApp FileXChange suffers from file include, arbitrary file upload, local command, and path injection vulnerabilities. Allows remote attackers to compromise a web application or mobile device with unauthorized requests...

ZineBasic 1.1 - Arbitrary File Disclosure Exploit

Exploit for php platform in category web applications Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

EMC ViPR SRM Cross-Site Request Forgery Vulnerability (CNVD-2016-07741)

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

ZineBasic 1.1 Remote File Disclosure

Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

ZineBasic 1.1 - Arbitrary File Disclosure

Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

ZineBasic 1.1 - Arbitrary File Disclosure

ZineBasic 1.1 - Arbitrary File Disclosure Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

AnoBBS 1.0.1 Remote File Inclusion

Exploitcode for Copy&Paste AnoBBS 1.0.1 Remote File Inclusion Exploit var dir="/progs/" var file="/bbsauth.php?" var parameter ="progdir=" var shell="Insert your shellcode here" function command if document.rfi.target1.value=="" alert"Exploit failed..."; return false; rfi.action=...

AnoBBS 1.0.1 - Remote File Inclusion

Exploit for php platform in category web applications Exploitcode for Copy&Paste AnoBBS 1.0.1 Remote File Inclusion Exploit var dir="/progs/" var file="/bbsauth.php?" var parameter ="progdir=" var shell="Insert your shellcode here" function command if document.rfi.target1.value=="" alert"Exploit...

AnoBBS 1.0.1 - Remote File Inclusion

AnoBBS 1.0.1 - Remote File Inclusion Exploitcode for Copy&Paste AnoBBS 1.0.1 Remote File Inclusion Exploit var dir="/progs/" var file="/bbsauth.php?" var parameter ="progdir=" var shell="Insert your shellcode here" function command if document.rfi.target1.value=="" alert"Exploit failed..."; retur...

AnoBBS 1.0.1 - Remote File Inclusion

Exploitcode for Copy&Paste AnoBBS 1.0.1 Remote File Inclusion Exploit var dir="/progs/" var file="/bbsauth.php?" var parameter ="progdir=" var shell="Insert your shellcode here" function command if document.rfi.target1.value=="" alert"Exploit failed..."; return false; rfi.action=...

VulnCheck KEV: CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

CVE-2016-4264

The Office Open XML OOXML feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity...

CVE-2016-4264: Improper Restriction of XML External Entity Reference

The Office Open XML OOXML feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity...