LG SuperSign CMS Arbitrary File Read Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An arbitrary file read vulnerability exists in LG SuperSign CMS, which can be exploited by an...

CVE-2018-16288

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

Red Hat glusterfs server arbitrary file read vulnerability

Red Hat glusterfs server is an open source distributed file system from Red Hat Red Hat. The system is mainly for media streaming , data analysis and other data and bandwidth intensive tasks to create large-scale distributed storage solutions. A security vulnerability exists in the Red Hat...

MikroTik RouterOS Winbox Unauthenticated Arbitrary File Read/Write Vulnerability

The remote networking device is running a version of MikroTik RouterOS vulnerable to an unauthenticated arbitrary file read and write vulnerability. An unauthenticated attacker could leverage this vulnerability to read or write protected files on the affected host. Nessus was able to exploit this...

LimeSurvey <= 3.14.7 Multiple Vulnerabilities

LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

LimeSurvey Arbitrary File Read Vulnerability

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A security vulnerability exists in LimeSurvey versions prior to 3.14.7. An attacker c...

CVE-2018-15698

ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi...

MetInfo arbitrary file read vulnerability fix with a bypass-vulnerability warning-the black bar safety net

404 laboratory inside the WAMWeb application monitoring program, the end of this article related to WAMsurveillance to MetInfo version of the update, and automatically diff files from the diff point of view, should be to fix a arbitrary file read vulnerability, but did not fix completely, resulti...

Cobbler Arbitrary File Read Vulnerability

Cobbler is a network installation server suite that makes it possible to quickly set up a Linux network installation environment. An arbitrary file read vulnerability exists in Cobbler version 2.6.11-1. An attacker can exploit this vulnerability to read arbitrary files...

tecrail Responsive FileManager Path Traversal Vulnerability

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail that supports the uploading and management of videos, images and other files. A directory traversal vulnerability exists in the /filemanager/ajaxcalls.php file in versions of tecrail...

GLSA-201808-02 : LinuX Containers user space utilities: Arbitrary file read

The remote host is affected by the vulnerability described in GLSA-201808-02 LinuX Containers user space utilities: Arbitrary file read lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check...

CVE-2016-9605

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation...

LinuX Containers user space utilities: Arbitrary file read

Background LinuX Containers user space utilities. Description lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn’t otherwise be able to reac...

Reprise License Manager Arbitrary File Read Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. An arbitrary file read vulnerability exists in Reprise RLM 12.2BL2 and earlier versions, which stems from the fact that by default, the web interface on port 5054 does not require authentication. The...

PHPOK 4.9.015 has an arbitrary file read vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK version 4.9.015 contains an arbitrary file read vulnerability that can be exploited by attackers to read arbitrary files...

Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) Arbitrary File Read

// A proof-of-concept exploit for CVE-2017-18344. // Includes KASLR and SMEP bypasses. No SMAP bypass. // No support for 1 GB pages or 5 level page tables. // Tested on Ubuntu xenial 4.4.0-116-generic and 4.13.0-38-generic // and on CentOS 7 3.10.0-862.9.1.el7.x8664. // // gcc pwn.c -o pwn // // ...

Linux Kernel 4.14.7 (Ubuntu 16.04 CentOS 7) - (KASLR SMEP Bypass) Arbitrary File Read

Linux Kernel 4.14.7 Ubuntu 16.04 CentOS 7 - KASLR SMEP Bypass Arbitrary File Read // A proof-of-concept exploit for CVE-2017-18344. // Includes KASLR and SMEP bypasses. No SMAP bypass. // No support for 1 GB pages or 5 level page tables. // Tested on Ubuntu xenial 4.4.0-116-generic and...

Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) - (KASLR & SMEP Bypass) Arbitrary File Read

// A proof-of-concept exploit for CVE-2017-18344. // Includes KASLR and SMEP bypasses. No SMAP bypass. // No support for 1 GB pages or 5 level page tables. // Tested on Ubuntu xenial 4.4.0-116-generic and 4.13.0-38-generic // and on CentOS 7 3.10.0-862.9.1.el7.x8664. // // gcc pwn.c -o pwn // // ...

Arbitrary File Read Vulnerability in Metinfo Content Management System

MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary file read vulnerability exists in the ol.php file in MetInfo 6.1.0 and earlier versions. An attacker can exploit the vulnerability to read sensitive files on a website...

Arbitrary File Read Vulnerability in BageCM v3.1.3

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCM v3.1.3 suffers from an arbitrary file reading vulnerability. The vulnerability is due to the template management function does not strictly filter the parameters, an attacker can use t...