Command injection

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

CVE-2015-6407

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

My.WiFi USB Drive 1.0 iOS - File Include Vulnerability

Exploit for iOS platform in category web applications Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== My WiFi USB drive. Files can be uploaded with any browser. Start the WiFi Drive web server...

My.WiFi USB Drive 1.0 File Inclusion

Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1589 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ==================================== 15...

My.WiFi USB Drive 1.0 iOS - Local File Inclusion

Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1589 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ==================================== 15...

WiFi Drive + CR v1.0 iOS - Persistent Filename Vulnerability

Document Title: =============== WiFi Drive + CR v1.0 iOS - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1595 Release Date: ============= 2015-09-22 Vulnerability Laboratory ID VL-ID: ==================================...

vBulletin Arbitrary File Upload Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . An arbitrary file upload vulnerability exists in vBulletin. An attacker could exploit this vulnerability to upload arbitrary files to an affected computer a...

WordPress Download Manager Free 2.7.94 & Pro 4 - Authenticated Stored XSS

Download Manager Free and Pro is prone to an authenticated stored XSS that allows an attacker to create new download package and upload files, called .jpg. This vulnerability works, when user try to edit this download package. Solution Upgrade to the latest version...

Bypass of file blacklist - ownCloud

A blacklist bypass vulnerability including UTF-8 encoding in file paths in the mentioned ownCloud versions, allows authenticated remote attackers to bypass the file blacklist and upload files such as the .htaccess files. An attacker could leverage this bypass by uploading a .htaccess and execute...

PT-2015-5384

Name of the Vulnerable Software and Affected Versions Adminsystems CMS versions prior to 4.0.2 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the asys/site/files.php endpoint, and then accessing it via a direct...

PT-2015-5039

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.6 Build 160014 Description A cross-site scripting XSS issue exists in the poll archive of PHPKIT, allowing remote attackers to inject arbitrary web script or HTML via the result parameter to "upload files/pk/include.php"...

AdaptCMS Arbitrary File Upload Vulnerability

AdaptCMS is a content management system. An arbitrary file upload vulnerability exists in AdaptCMS that could be exploited by an attacker to upload arbitrary files to an affected computer, which could result in the execution of arbitrary code within the context of the application...

CVE-2014-9567: Improper Control of Generation of Code

Unrestricted file upload vulnerability in process-upload.php in ProjectSend formerly cFTP r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/ or upload/temp/...

Netcore (Netis) Router 53413/UDP Backdoor Service Vulnerability

Netcore is a Shenzhen Lei Ke network communications producer, the main products involved in wireless routers, wireless network cards, network cards, hubs, switches, broadband routers, Layer 2, 3 and 4 switches, optical terminals. A large number of Netcore/Netis router products in the implementati...

xMid Deface Page Creator Tool

xMid Deface Page Creator is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

Code injection

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte %00 in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code...

CVE-2014-4872

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to 1 FileStorageService or 2 ConfigurationService...

reget deluxe 3.0 build 121 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9951/info It has been reported that ReGet may be prone to a directory traversal vulnerability that may allow remote attackers to upload files to arbitrary locations on a target system. The attacker may supply encoded...

PT-2014-4476

Name of the Vulnerable Software and Affected Versions ILIAS version 4.4.1 Description The issue allows remote authenticated users to execute arbitrary PHP code. This is achieved by using a .php filename in an upload files action to the uploadFiles command and then accessing the .php file via a...

Dexter (CasinoLoader) - SQL Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Dexter CasinoLoader SQL Injection", 'Description' = %q This module exploits a vulnerability found in the command and control panel us...