5957 matches found
CVE-2015-2876
CVE-2015-2876 describes an unrestricted upload vulnerability in Seagate/LaCie wireless storage devices (GoFlex Satellite, Wireless Mobile Storage, Wireless Plus, LaCie FUEL) with firmware versions before 3.4.1.105. An attacker can upload a file to the "/media/sda2" path during a Wi‑Fi session to ...
CVE-2015-2876: Undefined Security Weakness
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi...
PT-2015-3215
Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue is...
Tequila File Hosting 1.5 - Multiple Vulnerabilities
Tequila File Hosting 1.5 - Multiple Vulnerabilities ================================================================================ Tequila File Hosting Arbitrary File Download ================================================================================ Vendor Homepage:...
Tequila File Hosting 1.5 - Multiple Vulnerabilities
================================================================================ Tequila File Hosting Arbitrary File Download ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Date:...
appRain 4.0.3 Code Execution
Security Advisory - Curesec Research Team 1. Introduction Affected Product: appRain 4.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public: 12/02/2015 Release...
appRain 4.0.3 - Multiple Vulnerabilities
Exploit for php platform in category web applications appRain 4.0.3 Code Execution , XSS, CSRF , Path Traversal Vulnerabilities appRain is described as a Content Management Framework written in PHP. There are various components of appRain 4.0.3 that should not provide the possibility of code...
W-Script 3.4.0 Cross Site Scripting / Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : souk naamane 0 1 + Support e-mail :...
YesWiki 1 / 2 File Upload / Directory Traversal
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : souk naamane 0 1 + Support e-mail :...
CVE-2015-7773
The CVE-2015-7773 issue affects Kirby CMS (Panel component) prior to 2.1.2. Affected: Kirby 2.1.1 and older; vulnerability: unrestricted file upload where an attacker with authentication can upload a file without an extension and rename it to .php to execute arbitrary PHP code on the server. Root...
CVE-2015-7773
Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension...
PT-2015-7602
Name of the Vulnerable Software and Affected Versions Kirby versions prior to 2.1.2 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a file without an extension and then renaming it to have a .php extension. This is due to an unrestricted file...
CVE-2015-7773: Undefined Security Weakness
Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension...
WordPress Users Ultra 1.5.50 Unrestricted File Upload
Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...
WordPress Users Ultra 1.5.50 Unrestricted File Upload Vulnerability
WordPress Users Ultra plugin version 1.5.50 suffers from an unrestricted file upload vulnerability. Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact:...
WordPress Users Ultra Plugin 1.5.50 - Unrestricted File Upload
Because of this vulnerability, there is no sanitization for values in CSV file this file is accessible by anyone, all additional columns are in this file. In this way, an attacker can create and activate user accounts and compromise the whole site. Solution Upgrade the plugin...
WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload
WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...
WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload
Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...
CVE-2014-9752
Unrestricted file upload vulnerability in mods/core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the...
CVE-2014-9752: Undefined Security Weakness
Unrestricted file upload vulnerability in mods/core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the...