2763 matches found
PHP Advanced Transfer Manager 1.30 Remote Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15237/info PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access. Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a...
Compulsive Media CNU5 News.mdb Database Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including unencrypted...
iphone/ipad phone drive 1.1.1 - Directory Traversal
No description provided by source. !/usr/bin/python ---------------------------------------------------------------- Software : iPhone/iPad Phone Drive 1.1.1 Type of vulnerability : Directory Traversal Tested On : iPhone 4 IOS 4.3.3/Jailbroken...
Apache Tomcat <= 6.0.16 'RequestDispatcher' Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30494/info Apache Tomcat is prone to a remote information-disclosure vulnerability. Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server. Information obtained may lead to...
Xedus Web Server 1.0 testgetrequest.x username Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous...
keene digital media server 1.0.2 - Directory Traversal variant vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory...
Compaq Web-Based Management Agent Remote File Verification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8019/info Compaq Web-Based Management Agent has been reported vulnerable to a remote file verification vulnerability. This information leak could be exploited by an attacker to verify the existence of sensitive files on a...
Xivo 1.2 Arbitrary File Download
No description provided by source. Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...
myserver 0.7 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to...
HP-UX FTPD 1.1.214 .4 REST Command Memory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it is possible to...
sd server 4.0.70 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12609/info A vulnerability has been identified in the handling of certain types of requests by SD Server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read privileg...
Sambar Server 6.1 beta 2 showperf.asp title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues requi...
IBM DB2 db2job File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files...
DEBIAN-CVE-2014-4039
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf...
CVE-2014-2232 - "Absolute Path Traversal" (CWE-36) vulnerability in "infoware MapSuite"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2232 =================== "Absolute Path Traversal" CWE-36 vulnerability in "infoware MapSuite" Vendor =================== infoware GmbH Product =================== MapSuite Affected versions =================== This vulnerability affects...
Yealink VoIP Phone SIP-T38G Local File Inclusion
Title: Yealink VoIP Phone SIP-T38G Local File Inclusion Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5756, CVE-2013-5757 Description: Web interface contain a vulnerability that allow any...
Yealink VoIP Phone SIP-T38G - Local File Inclusion
Yealink VoIP Phone SIP-T38G - Local File Inclusion Title: Yealink VoIP Phone SIP-T38G Local File Inclusion Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5756, CVE-2013-5757 Description: We...
SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140528-0 ======================================================================= title: Root Backdoor & Unauthenticated access to voice recordings product: NICE Recording eXpress voice recording soluti...
Indexable User Content (Attachments) on Google
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-47021. panel User content uploaded onto answers.atlassian.com is indexable by Google due to the lack of appropriate indexing...
Indexable User Content (Attachments) on Google
User content uploaded onto answers.atlassian.com is indexable by Google due to the lack of appropriate indexing rules such as those in /robots.txt. Additionally, such content being indexed can be removed from Google by consulting Google's Webmaster tools. An example of indexable content is below:...