225 matches found
CVE-2013-3499
GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header...
rhn_satellite: Improper channel comps information management
Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...
Java Mini Web Server <= 1.0 Path Traversal and Cross Site Scripting
Exploit for multiple platform in category remote exploits =================================================================== Java Mini Web Server | www.DigitalWhisper.co.il Software Link: http://www.jibble.org/miniwebserver/ Version: YOURXSSHEREWork?Index of %00"Work?Index of %00"Work? Work?...
OpenJDK Pack200 Buffer overflow vulnerability (6792554)
Buffer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...
CVE-2008-0242
Summary: CVE-2008-0242 affects Sun Solaris 10, specifically the libdevinfo component. The vulnerability is described as an unspecified local privilege escalation via login device permissions, enabling a local user to access files and gain privileges. Affected product/area: Sun Solaris 10 (libdevi...
PHP safemode bypass
By using LOADFILE, INTO DUMPFILE, INTO OUTFILE SQL modifiers it's possible to access files behind basedir...
CVE-2004-2684
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including 1 cache.key and 2 cache.dat, related to .csp files under a Dev\studio\templates and b Devuser\studio\templates...
ImgSvr 0.6 - 'Template' Local File Inclusion
source: https://www.securityfocus.com/bid/24853/info ImgSvr is prone to a local file-include vulnerability because it fails to sanitize user-supplied input. Attackers may exploit this issue to access files that may contain sensitive information. UPDATE December 24, 2007: According to the vendor,...
HVM guest VNC server allows compromise of entire host OS by any VNC console user
The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE...
CVE-2006-3495
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...
CVE-2006-2511
The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog...
CIS WebServer 3.5.13 - Directory Traversal
CIS WebServer 3.5.13 - Directory Traversal source: https://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files...
CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm"...
Doro privilege escalation
It's possible to access any file or pipe with local system privileges...
Kukol E.V. HTTP & FTP Server Suite 6.2 - File Disclosure
source: https://www.securityfocus.com/bid/8564/info The web server component of Kukol E.V. HTTP & FTP Server Suite is prone to a file disclosure vulnerability. Remote web users may use directory traversal sequences in requests to gain access to files outside of the server's web root directory...
CVE-2002-1335
Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...
CVE-2001-0963
Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...
Обход входа на машину в клиенте Novell Netware (protection bypass)
Из приглашения входа можно вызвать программу справки, которая позволяет открыть любой файл и выполнить приложение...
Обратный путь в Novell Groupwise (directory traversal)
Компонента Webacc позволяет обратиться к любому файлу в системе...
Дырки в Sun Cluster
Sun Cluster позволяет удаленному пользователю без авторизации обращаться к приложениям, обычно доступным только root, в сочетании с локальной уязвимостью позволяет локальным пользователям получить доступ на чтение к любым файлам...