QNAP Signage Station and iArtist Lite contain multiple vulnerabilities

Overview The QNAP Signage Station prior to version 2.0.1 and the accompanying iArtist Lite application contain multiple vulnerabilities. Description CWE-434: Unrestricted Upload of File with Dangerous Type - CVE-2015-6022An authenticated attacker without administrative permissions may upload a...

Legal Robot: Remote Code Execution (upload)

Any file upload was accepted without filter, which led to RCE vulnerability. It was difficult to find the path tho :P Strange thing : The shell was executing on firefox only :P , it displayed plain text when opened in chrome...

CVE-2016-1524

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using 1 fileUpload.do or 2 lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for ...

HD Video Player v2.5 iOS - Multiple Web Vulnerabilities

Document Title: =============== HD Video Player v2.5 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1719 Release Date: ============= 2016-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 17...

WordPress WP User Frontend 3.4.6 File Upload

Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://wedevs.com Software Link:...

Symphony CMS 2.6.5 SQL Injection / File Upload

Advisory ID: SGMA-16002 Title: Symphony CMS multiple vulnerabilities Product: Symphony CMS Version: 2.6.5 and probably prior Vendor: www.getsymphony.com Vulnerability type: SQL-injection, Unrestriced File Upload Risk level: 4 / 5 Credit: [email protected] CVE: N/A Vendor...

WordPress User Frontend Plugin < 2.3.11 - Unrestricted Arbitrary File Upload

Exploit for php platform in category web applications ''' Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://wedevs.c...

WordPress WP User Frontend Plugin 2.3.10 - Unrestricted File Upload

Because of this vulnerability, anyone can upload files to the web server by performing certain "wpuffileupload" or "wpufinsertimage" actions. Solution Upgrade the plugin...

WordPress Plugin WP User Frontend 2.3.11 - Unrestricted Arbitrary File Upload

WordPress Plugin WP User Frontend 2.3.11 - Unrestricted Arbitrary File Upload ''' Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor...

Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

ThumbDrive v1.1 (USB) iOS - Multiple Web Vulnerabilities

Document Title: =============== ThumbDrive v1.1 USB iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1707 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 170...

ThumbDrive v1.1 (USB) iOS - Multiple Web Vulnerabilities

Document Title: =============== ThumbDrive v1.1 USB iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1707 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 170...

Advantech WebAccess File Upload Vulnerability

Advantech WebAccess HMI/SCADA software provides remote control and management. An unrestricted file upload vulnerability exists in Advantech WebAccess versions prior to 8.1, which can be exploited by a remote attacker to write to any type of file...

CVE-2016-0854

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors...

CVE-2016-0854

Affected product: Advantech WebAccess, specifically the Dashboard Viewer component of WebAccess prior to version 8.1. Vulnerability summary: Unrestricted upload of a file with dangerous type via the UploadAjaxAction script (uploadImageCommon/uploadFile/uploadBannerImage paths) in the WebAccess Da...

CVE-2015-2876

CVE-2015-2876 describes an unrestricted upload vulnerability in Seagate/LaCie wireless storage devices (GoFlex Satellite, Wireless Mobile Storage, Wireless Plus, LaCie FUEL) with firmware versions before 3.4.1.105. An attacker can upload a file to the "/media/sda2" path during a Wi‑Fi session to ...

Tequila File Hosting 1.5 - Multiple Vulnerabilities

================================================================================ Tequila File Hosting Arbitrary File Download ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Date:...

Tequila File Hosting 1.5 - Multiple Vulnerabilities

Tequila File Hosting 1.5 - Multiple Vulnerabilities ================================================================================ Tequila File Hosting Arbitrary File Download ================================================================================ Vendor Homepage:...

appRain 4.0.3 Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: appRain 4.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public: 12/02/2015 Release...