Lucene search
+L

279 matches found

CNVD
CNVD
•added 2019/04/02 12:00 a.m.•63 views

Pydio Cross-Site Scripting Vulnerability (CNVD-2019-14091)

Pydio AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A cross-site scripting vulnerability exists in Pydio version 8, which stems from a lack of proper validation of client-side data by the WEB...

5.4CVSS6.5AI score0.00668EPSS
SaveExploits3References1
n0where
n0where
•added 2018/05/31 6:56 p.m.•70 views

File System Crawler: diskover

diskover is an open source file system crawler and disk space usage software that uses Elasticsearch to index and manage data across heterogeneous storage systems. Using diskover, you are able to more effectively search and organize files and system administrators are able to manage storage...

SaveExploits0References4
attackerkb
attackerkb
•added 2017/07/19 1:29 p.m.•12 views

CVE-2016-7509

Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...

5.4CVSS5.7AI score0.00637EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/06/15 12:00 a.m.•19 views

The vulnerability of the Samsung Security Manager video surveillance system allows a intruder to execute arbitrary code.

The vulnerability of the Samsung Security Manager video surveillance system allows a malicious actor to execute arbitrary code by uploading a specially crafted file via the HTTP protocol...

10CVSS6AI score0.10236EPSS
SaveExploits2References1Affected Software1
Vulnerability Lab
Vulnerability Lab
•added 2014/10/01 12:00 a.m.•57 views

HTTP Commander v3.1.9 - CS Exception Vulnerability

Document Title: =============== HTTP Commander v3.1.9 - CS Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1329 Release Date: ============= 2014-10-01 Vulnerability Laboratory ID VL-ID: ==================================== 1329...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•34 views

dsm light web file browser 2.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10381/info DSM Light has been reported to be prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue would allow an attacker...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Web File Browser 0.4b14 File Download Vulnerability

No description provided by source. Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•38 views

Word Viewer OCX 3.2 - Remote File Execution exploit

No description provided by source. HTML ---------------------------------------------------------- br Word viewer OCX V 3.2 Remote File execution exploitbr ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

Buttercup WFM Title Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•36 views

Computalynx CMail 2.3 Web File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/281/info A vulnerability in Computalynx's CMail allows remote malicious users to steal local files. Compulynx's CMail is a Win32 mail server program. One of its features is allowing users to access their email with a web...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

Floosietek FTGate 2.1 Web File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•42 views

Gordano NTMail 4.2 Web File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/279/info A vulnerability in Gordano's NTMail allows remote malicious users to steal local files. Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the server...

7.1AI score
SaveExploits0
zdt
zdt
•added 2014/06/27 12:00 a.m.•1617 views

elFinder 2.0 - file manager for web(rc1) - File Upload Vulnerability

Usage Info Info : u can upload .php .php3 .php6 .txt .html .pl .htaccess and ... Upload Your webshell and load from : site.com/var/upload/ro0t.php site.com/files/upload/ro0t.php site.com/var/upload/ro0t.php for get file url double click on your file to open file iframe page |/ o o...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2014/05/05 12:00 a.m.•87 views

[SECURITY] [DSA 2882-1] extplorer security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2882-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2014 http://www.debian.org/security/faq -...

2.6CVSS1.6AI score0.01947EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2014/03/22 12:00 a.m.•36 views

Debian DSA-2882-1 : extplorer - security update

Multiple cross-site scripting XSS vulnerabilities have been discovered in extplorer, a web file explorer and manager using Ext JS. A remote attacker can inject arbitrary web script or HTML code via a crafted string in the URL to application.js.php, admin.php, copymove.php, functions.php, header.p...

2.6CVSS5.5AI score0.01947EPSS
SaveExploits3References5
OSV
OSV
•added 2014/03/20 12:00 a.m.•43 views

DSA-2882-1 extplorer - security update

Bulletin has no description...

2.6CVSS6.1AI score0.01947EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2014/03/19 12:00 a.m.•70 views

Debian: Security Advisory (DSA-2882-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.6AI score0.01947EPSS
SaveExploits3References3
zdt
zdt
•added 2013/12/15 12:00 a.m.•38 views

Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://sourceforge.net/projects/webfilebrowser/files/webfilebrowser/ + Google Dork:...

7.1AI score
SaveExploits0
Nmap
Nmap
•added 2012/01/31 8:22 p.m.•460 views

http-qnap-nas-info NSE Script

Attempts to retrieve the model, firmware version, and enabled services from a QNAP Network Attached Storage NAS device. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...

10CVSS8AI score0.99448EPSS
SaveExploits35
NVD
NVD
•added 2011/12/15 3:57 a.m.•22 views

CVE-2011-4831

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

4CVSS6.2AI score0.0263EPSS
SaveExploits2References1
Rows per page
Query Builder