Arbitrary File Read Vulnerability in ZXR10 6800 Multiservice Router Web Management System

The ZXR10 6800 Multiservice Router is a new generation of high-performance multiservice router products launched by ZTE. An arbitrary file read vulnerability exists in the Web management system of the ZXR10 6800 Multiservice Router. An attacker can exploit the vulnerability by using... /...

Exploit for Path Traversal in Fortinet Fortiproxy

FortiOS system file leak through SSL VPN via specially crafted H...

CVE-2017-15684

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...

PT-2020-8128

Name of the Vulnerable Software and Affected Versions: Crafter Studio versions prior to 3.0.1 Description: An unauthenticated attacker can create a site with specially crafted XML, allowing the retrieval of OS files out-of-band. This issue affects Crafter Studio, enabling attackers to access...

Crafter CMS Information Disclosure Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. An information disclosure vulnerability exists in Crafter CMS Crafter Studio version 3.0.1 that can be exploited by an attacker to be able to create a site with special XML that allows out-of-band...

Crafter CMS Crafter Studio Path Traversal Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A path traversal vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows an unauthenticated attacker to view files on the operating system...

Crafter CMS License Issues Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A security vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which stems from a vulnerability that can be exploited by an unauthenticated attacker to be able to create a site with...

MGASA-2020-0429 Updated librepo packages fix a security vulnerability

It was discovered that librepo was subject to a directory traversal vulnerability where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal...

The vulnerability of the REST API implementation of the Cisco Edge Fog Fabric data processing platform allows a attacker to re-write any files in the operating system of the vulnerable device.

The vulnerability of the REST API implementation of the Cisco Edge Fog Fabric data processing platform involves exposing resources to an unauthorized area. Exploiting this vulnerability could allow a malicious actor to rewrite any files in the operating system of the vulnerable device remotely...

The vulnerability of the guest OS layer of the Cisco IOS XE operating system allows a hacker to gain access to read and write system and configuration files.

The vulnerability of the Cisco IOS XE operating system’s guest layer is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain read and write access to system and configuration files...

XML External Entity (XXE)

hapi-fhir-utilities is vulnerable to XML external entities XXE. An attacker is able to provide malicious XML input containing a reference to an external entity and retrieve system files. The vulnerability exists as the library does not disable external DTDs and doctype declarations by default...

Directory Traversal

droppy is vulnerable to directory traversal. Lack of validation allows an attacker to access system files outside of the web root using the ../ characters in the URL...

CVE-2020-24990

An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...

CVE-2020-24990

An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion

Exploit Title: Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion Date: 2020-10-27 Exploit Author: Ivo Palazzolo @palaziv Reference: https://www.oracle.com/security-alerts/cpuoct2020.html Vendor Homepage...

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 LFI

Exploit Title: Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion Date: 2020-10-27 Exploit Author: Ivo Palazzolo @palaziv Reference: https://www.oracle.com/security-alerts/cpuoct2020.html Vendor Homepage...

Cisco Firepower Threat Defense sfmgr Command Directory Traversal Vulnerability

Cisco Firepower Threat Defense is unified software that provides next-generation firewall services. A directory traversal vulnerability exists in the Cisco Firepower Threat Defense sfmgr command, which can be exploited by a remote attacker to submit a special request that can be used to perform a...

Directory Traversal

superstatic is vulnerable to directory traversal. Lack of validation in the file path allows a user to access to system files through the path name using the ../ characters...

XML External Entity (XXE)

shopware is vulnerable to XML external entity XXE attacks. The load external DTDs is not disabled by default and allows an attacker to retrieve system files or perform requests on behalf of the server...

Code injection

SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...