CVE-2021-26294

CVE-2021-26294 affects AfterLogic Aurora and WebMail Pro up to version 7.7.9. It is a directory traversal vulnerability in WebDAV endpoints (dav/server.php) that allows unauthenticated attackers to read arbitrary files (e.g., data/settings/settings.xml) by using crafted paths such as ../..//dav/s...

Fluig 1.7.0 Path Traversal

Exploit Title: Fluig 1.7.0 - Path Traversal Date: 26/11/2020 Exploit Author: Lucas Souza Vendor Homepage: https://www.totvs.com/fluig/ Version: payload.txt curl -s https://raw.githubusercontent.com/lucxssouza/banners/main/xFluig/banner banner -- FUNCTIONS -- function create-payload wordlist.txt...

Information Disclosure

datadog-api-client is vulnerable to information disclosure. The vulnerability exists through the function prepareDownloadFile creating a temporary file with the permissions bits of -rw-r--r-- and the function downloadFileFromResponse method downloading sensitive files into temporary directory...

Cisco Network Services Orchestrator 安全漏洞

Cisco Network Services Orchestrator NSO is a network automation services solution from Cisco. A security vulnerability exists in Cisco Network Services Orchestrator, which can be exploited by an attacker to access sensitive files on an affected system...

Design/Logic Flaw

The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check...

Arbitrary File Deletion Vulnerability in RGCMS Backend

RGCMS is an open source building management system, written in PHP with a Thinkphp 5.1 framework. RGCMS backend exists arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete sensitive files in the website...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

Directory traversal

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22656: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

PT-2021-15154

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue allows an attacker to perform directory traversal, potentially enabling them to read sensitive files. Recommendations For Advantech iView versions prior to v5.7.03.6112, upda...

Advantech Iview 路径遍历漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...

Directory Traversal Vulnerability in M18G of Shenzhen Meike Star Communication Technology Co.

The M18G is a wireless router. A directory traversal vulnerability exists in the M18G of Shenzhen Meike Star Communication Technology Co. An attacker can exploit the vulnerability to access arbitrary directories on the file system and read sensitive files...

STVS ProVision 5.9.10 - File Disclosure (Authenticated)

Exploit Title: STVS ProVision 5.9.10 - File Disclosure Authenticated Date: 19.01.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.stvs.ch STVS ProVision 5.9.10 archive.rb Authenticated File Disclosure Vulnerability Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby...

CVE-2020-23161

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance Logs menu and manipulating the file-path in the URL...

Remote file inclusion

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance Logs menu and manipulating the file-path in the URL...

CVE-2020-23161

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance Logs menu and manipulating the file-path in the URL...

PT-2021-10847

Name of the Vulnerable Software and Affected Versions Pyrescom Termod4 versions prior to 10.04k Description The issue allows authenticated remote attackers to traverse directories and read sensitive files. This is achieved by manipulating the file-path in the URL via the Maintenance Logs menu...