Sun Solaris 2.5/2.6/7.0/8/9 AT Command Arbitrary File Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6692//info The at utility shipped with Sun Solaris may be prone to an issue which may allow attackers to delete arbitrary files on the system. The vulnerability occurs when using at with the '-r' option. This option is us...

ShopCartCGI 2.3 gotopage.cgi Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attack...

FastStone 4in1 Browser 1.2 Web Server Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12937/info A vulnerability has been identified in the handling of certain types of requests by the 4in1 Browser Web server. Because of this, it is possible for an attacker to gain access to potentially sensitive system...

file sharing for net 1.5 - Directory Traversal file disclosure vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8513/info File Sharing for Net is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse...

QNX RTOS 4.25 monitor Arbitrary File Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files such as /etc/passwd. monitor is installed setuid root by default. The monitor -f command line...

elron im anti-virus 3.0.3 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2519/info Elron IM is a suite of tools providing internet filtering, virus protection, and other features. Certain non-current versions of products in the Internet Manager suite, including IM Anti-Virus, are vulnerable to...

ION Script 1.4 - Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6091/info A vulnerability has been discovered in ION Script. By sending a malicious HTTP request to a webserver running the vulnerable ION Script package, it is possible for a remote attacker to disclose arbitrary webserv...

Serv-U 2.4/2.5 FTP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the...

Adobe ColdFusion <=8.0 - Directory Traversal Vulnerability (CVE-2010-2861)

Adobe ColdFusion =8.0 http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en server替换成目标网站即可 Update:2017-04-28 This blog was written by Scott White, Senior Principal Security Consultant, Web Application Team Lead – TrustedSec TL;D...

Phorum 3.0.7 auth.php3 Backdoor Vulnerabililty

No description provided by source. source: http://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin board...

ARCservIT 6.61/6.63 Client asagent.tmp Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens and truncates it if it exists a...

ARCservIT 6.61/6.63 Client inetd.tmp Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent', opens and overwrites it if it...

Linux System Files Information Disclosure (CVE-2018-10823; CVE-2018-3948)

Linux operating system contains system files with sensitive information. If not properly configured, remote attackers can view the information on such files...

FD - Cobbler Arbitrary File Read CVE-2014-3225

Vulnerability title: Arbitrary file read CVE: CVE-2014-3225 Vendor: Cobbler Product: Cobbler Affected version: =2.6.0 Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- In all Cobbler versions = 2.6.0 an arbitrary system...

ElasticSearch - Remote Code Execution

body padding-top: 50px; .starter-template padding: 40px 15px; text-align: center; function esinject var readfile; var writefile; readfile = functionfilename return "import java.util.;\nimport java.io.;\nnew Scannernew File"" + filename + "".useDelimiter"\\Z".next;"; ; writefile =...

Xangati software release contains relative path traversal and command injection vulnerabilities

Overview Xangati's software release contains relative path traversal CWE-23 and command injection CWE-78 vulnerabilities. Description Xangati's software release contains relative path traversal CWE-23 and command injection CWE-78 vulnerabilities.CWE-23: Relative Path Traversal -CVE-2014-0358 The...

CA Erwin Web Portal目录遍历漏洞

Bugtraq ID:66644 CVE ID:CVE-2014-2210 CA ERwin Web Portal是基于网络的新界面CA ERwin网络门户。 CA ERwin Web Portal存在多个目录遍历漏洞，允许远程攻击者利用漏洞提交请求以WEB权限查看系统文件内容。 0 CA ERwin Web Portal 9.5 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=7F968A14-7407-4BCF-9EB1-EFE9F0E6D663...

SAP NetWeaver - SMB Relay

Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...

eduTrac目录遍历漏洞

Bugtraq ID:64255 eduTrac是一个开源的学生管理信息系统。 eduTrac存在一个未明目录遍历漏洞，允许远程攻击者利用漏洞提交特殊请求，查看系统文件内容。 0 eduTrac 1.1.1-Stable eduTrac 1.1.2版本以修复此漏洞，建议用户下载使用： http://sourceforge.net/projects/edutrac/...

IT-Grundschutz M4.135: Restriktive Vergabe von Zugriffsrechten auf Systemdateien

IT-Grundschutz M4.135: Restriktive Vergabe von Zugriffsrechten auf Systemdateien. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94215 Stand: 13. Ergänzungslieferung 1...