CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6871

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function...

LibreOffice Arbitrary File Read Vulnerability

LibreOffice is a free and open source office software suite developed by The Document Foundation TDF. The suite consists of Writer text documents, Calc spreadsheets and Impress presentations and other applications. A security vulnerability exists in LibreOffice 6.0.1 and earlier versions. A remot...

NetEx HyperIP Privilege Escalation Vulnerability

Vulnerability Details Affected Vendor: NetEx Affected Product: HyperIP Affected Version: 6.1.0 Platform: Embedded Linux CWE Classification: CWE-592: Authentication Bypass Issues Impact: Privilege Escalation Attack vector: HTTPS 2. Vulnerability Description Privileges can be escalated by abusing...

Sandstorm Arbitrary File Read Vulnerability

Sandstorm is a personal cloud platform. The platform features file storage, application management, task and project management, and more. A security vulnerability exists in versions prior to Sandstorm build 0.203, which stems from the failure of the 'findFilesToZip' function to filter newline n...

Arbitrary File Read Vulnerability in Rice CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. An arbitrary file read vulnerability exists in Daimi CMS v5.9.9, which is caused b...

Marked Information Disclosure Vulnerability

Marked is an American software developer Christopher Jeffrey developed a use of JavaScript to write the Markdown parser and compiler . An information disclosure vulnerability exists in Marked 2 2.5.11 and earlier versions. The vulnerability can be exploited by a remote attacker to read arbitrary...

Arbitrary File Read Vulnerability in LFCMS Version 3.4.0

LFCMS is a film and television content management system developed in PHP and based on THINKPHP framework suitable for all kinds of video, film and television websites. LFCMS 3.4.0 version of the arbitrary file reading vulnerability, attackers can use the vulnerability to obtain the source code o...

IBM Tealeaf Customer Experience Arbitrary File Read Vulnerability

IBM Tealeaf Customer Experience is a SaaS Software-as-a-Service based analytics solution for web and mobile applications from IBM, USA. The solution helps clients improve the overall user experience by analyzing and understanding data, and supports the adoption of advanced user interfaces for ric...

YidaCMS Web Management System JS1.8.0 Version Exists Arbitrary File Read Vulnerability

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file reading vulnerability, attackers can use the vulnerability to obtain the website source code information...

Biscom Secure File Transfer Arbitrary File Download Vulnerability

Biscom Secure File Transfer SFT is a Web-based file transfer solution from Biscom USA. The solution has features such as file sharing, workspace creation and automatic file cleanup. A security vulnerability exists in Biscom SFT versions 5.0.1000 through 5.0.1048, which stems from the program...

PACSOne Server 6.6.2 DICOM Web Viewer - Directory Trasversal

PACSOne Server 6.6.2 DICOM Web Viewer - Directory Trasversal Exploit Title: PACSOne Server 6.6.2 DICOM Web Viewer Directory Trasversal / Local File Inclusion Date: 08/14/2017 Software Link: http://www.pacsone.net/download.htm Google Dork: inurl:pacs/login.php inurl:pacsone/login.php inurl:pacsone...

Jenkins Script Security Plugin Arbitrary File Read Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task . Script Security...

Arbitrary File Read Vulnerability in Xingyunhai CMS V3.5

Xing Yunhai CMS XYHCMS is a completely open source set of CMS content management system , simple , easy to use. XYHCMS V3.5 version of the existence of arbitrary file reading vulnerability , attackers can use the vulnerability to read any file on the site to obtain sensitive information...

Arbitrary File Read Vulnerability in Rice CMS v5.5.3

DAMI CMS is a free open source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smart phone station solutions. The version of DAMI CMS V5.5.332017-04-15 has an arbitrary file reading vulnerability, whi...

File Inclusion Vulnerability in OpenSNS

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. OpenSNS suffers from a file inclusion vulnerability. Allows an attacker to read the contents of a file by constructing a URL...

Kaseya VSA R9.2 Arbitrary File Read Vulnerability

A security vulnerability was found in Kaseya VSA file download file functionality. Using this vulnerability an authenticated user in a Kaseya VSA environment is able to download arbitrary files from the server including source code of Kaseya, the database backups, configuration files, and even...

Microsemi Symmetricom s350i Path Traversal Vulnerability

Microsemi Symmetricom s350i is a clock server from Microsemi Corporation. web application is one of the web applications. A directory traversal vulnerability exists in the web application in Microsemi Symmetricom s350i version 2.70.15. A remote attacker could exploit the directory traversal...

Kaseya VSA R9.2 Arbitrary File Read

------------------------------------------------------------------------ Arbitrary file read in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017 ------------------------------------------------------------------------...

Arbitrary File Read and Code Execution Vulnerability in Axublog Blog System

Axublog is a PHP personal blog system. An arbitrary file read and code execution vulnerability exists in version 1.0.7 of the Axublog blogging system, which is caused by the system's failure to adequately filter and validate paths and content. An attacker can use this vulnerability to read...