283 matches found
Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. id: CVE-2021-44138 info: name: Caucho Resin =4.0.52 =4.0.56 - Directory travers...
CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
EUVD-2017-19014
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the resin-doc documentation webapp, specifically through the jndi-appconfig tutorial servlet. By supplying directory traversal sequences in the inputFile request parameter, remote unauthenticated attackers can read arbitrary files outside th...
CVE-2017-20284: Improper Limitation of a Pathname to a Restricted Directory
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
PT-2026-95641
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
VulnCheck KEV: CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
Caucho Resin - Legacy WEB-INF Path Traversal Detection
Detects classic Caucho Resin path-traversal tricks that expose WEB-INF/resin-web.xml: /.jsp/WEB-INF/ CVE-2001-0399, /WEB-INF../ CVE-2004-0281, and /%20../WEB-INF/ CVE-2007-2440. !/usr/bin/env python3 -- coding: utf-8 -- """Caucho Resin legacy WEB-INF path traversal CVE-2001-0399 / 2004-0281 /...
Caucho Resin LFR Detection
A vulnerability in Caucho Resin allows remote unauthenticated users to utilize the 'inputFile' variable to include the content of locally stored files and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Caucho Resin allows remote unauthenticated users to...
A week in security (July 20 – July 26)
Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...
Don’t get fooled by TikTok resin art scams
Resin art has become a popular corner of TikTok, with some videos attracting millions of views. But not every glossy, colorful post is what it claims to be. Scammers are using the look of handmade resin art to trick buyers, collectors, and even fellow artists into sending money for work that eith...
MiracleLinux 3 : resin-3.1.9-1AXS3 (AXSA:2009-48:01)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-48:01 advisory. Resin Open Source provides JSP, Servlet, and EJB functionality under the GPL license. Fixed bugs: CVE-2008-2462 Cross-site scripting XSS vulnerability in the...
EUVD-2007-2436
Malware in sbrugna...
EUVD-2000-1206
Malware in sbrugna...
EUVD-2002-2069
Malware in sbrugna...
EUVD-2001-0304
Malware in sbrugna...