CVE-2020-25850

HGiga MailSherlock’s View Source Code feature is vulnerable to arbitrary file download due to insufficient validation of specific characters. Multiple sources (CVE-2020-25850 entries, CNVD-2021-06948) describe that remote attackers can exploit this to download arbitrary system files. The vulnerab...

CVE-2020-25850 HGiga MailSherlock - Arbitrary File Download

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...

Missing user validation leading to information disclosure

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root...

The vulnerability of the Fanuc 32i numerical program-controlled controller stems from deficiencies in the storage of protected information, allowing attackers to copy or modify user files and system files.

The vulnerability of the numerical program-controlled controller Fanuc 32i is related to deficiencies in the storage of protected information. Exploiting this vulnerability could allow an intruder to copy or modify user files and system files...

CVE-2020-26277

DBdeployer (dbdeployer) prior to v1.58.2 is vulnerable to a symbolic-link path traversal during tarball unpacking, allowing an attacker with a malicious tarball to cause writes to files outside the target directory (potentially system files). This requires: the user running as root (dbdeployer ca...

PT-2020-16399 · Mysql Server · Dbdeployer

Name of the Vulnerable Software and Affected Versions: DBdeployer versions prior to 1.58.2 Description: DBdeployer is a tool that deploys MySQL database servers easily. Users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files external to the target. In such...

Sonatype Nexus Repository Manager 代码问题漏洞

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...

Information Disclosure

psensor is vulnerable to information disclosure. The createresponse function in server/server.c allows an attacker to access system files outside of the web root...

Arbitrary File Read Vulnerability in ZXR10 6800 Multiservice Router Web Management System

The ZXR10 6800 Multiservice Router is a new generation of high-performance multiservice router products launched by ZTE. An arbitrary file read vulnerability exists in the Web management system of the ZXR10 6800 Multiservice Router. An attacker can exploit the vulnerability by using... /...

Exploit for Path Traversal in Fortinet Fortiproxy

FortiOS system file leak through SSL VPN via specially crafted H...

CVE-2017-15684

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...

Crafter CMS Information Disclosure Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. An information disclosure vulnerability exists in Crafter CMS Crafter Studio version 3.0.1 that can be exploited by an attacker to be able to create a site with special XML that allows out-of-band...

PT-2020-8128

Name of the Vulnerable Software and Affected Versions: Crafter Studio versions prior to 3.0.1 Description: An unauthenticated attacker can create a site with specially crafted XML, allowing the retrieval of OS files out-of-band. This issue affects Crafter Studio, enabling attackers to access...

Crafter CMS Crafter Studio Path Traversal Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A path traversal vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows an unauthenticated attacker to view files on the operating system...

Crafter CMS License Issues Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A security vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which stems from a vulnerability that can be exploited by an unauthenticated attacker to be able to create a site with...

MGASA-2020-0429 Updated librepo packages fix a security vulnerability

It was discovered that librepo was subject to a directory traversal vulnerability where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal...

The vulnerability of the REST API implementation of the Cisco Edge Fog Fabric data processing platform allows a attacker to re-write any files in the operating system of the vulnerable device.

The vulnerability of the REST API implementation of the Cisco Edge Fog Fabric data processing platform involves exposing resources to an unauthorized area. Exploiting this vulnerability could allow a malicious actor to rewrite any files in the operating system of the vulnerable device remotely...

The vulnerability of the guest OS layer of the Cisco IOS XE operating system allows a hacker to gain access to read and write system and configuration files.

The vulnerability of the Cisco IOS XE operating system’s guest layer is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain read and write access to system and configuration files...

XML External Entity (XXE)

hapi-fhir-utilities is vulnerable to XML external entities XXE. An attacker is able to provide malicious XML input containing a reference to an external entity and retrieve system files. The vulnerability exists as the library does not disable external DTDs and doctype declarations by default...

Directory Traversal

droppy is vulnerable to directory traversal. Lack of validation allows an attacker to access system files outside of the web root using the ../ characters in the URL...