7959 matches found
phpcms v9 后台任意文件读取(可获取authkey)
No description provided by source...
CVE-2 0 1 6-1897/8 - FFMpeg vulnerability analysis-vulnerability warning-the black bar safety net
This time there are a lot of vulnerabilities to a sudden outbreak, just like these days of ImageMagick vulnerability swept through the domestic Internet. This a day or two in the black bar safety net@Noxxx first made a two major manufacturers of FFmpeg vulnerabilities, and then also by the other...
LebiShop Mall Backend Arbitrary File Reading Vulnerability
LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The management background of this mall system provides the editing function of the system template file. The file parameter of this function page is no...
ImageMagick Studio ImageMagick Arbitrary File Read Vulnerability
ImageMagick Studio ImageMagick is the United States a set of open source image processing software. A security vulnerability in the ImageMagick Studio ImageMagickLABEL encoder allows remote attackers to construct malicious images and read arbitrary files...
CVE-2016-3717
CVE-2016-3717 affects ImageMagick (LABEL coder) and allows reading local files via a crafted image. Affected: ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1. Mitigations documented include disabling vulnerable coders (EPHEMERAL, URL/HTTPS, MVG, MSL, etc.) via policy.xml and applying vendor-se...
Linux kernel arbitrary file read vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An arbitrary file read vulnerability exists in the fs/namespace.c file in versions of Linux kernel prior to 4.0.2, which stems from a program that does not properly support...
Micro Focus Service Desk Arbitrary File Read Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
CVE-2016-4004
Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...
PT-2016-5023
Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to 2015.1.4 kilo OpenStack Compute Nova versions 12.0.x prior to 12.0.3 liberty Description The issue allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or...
DotCMS Directory Traversal Vulnerability
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A directory traversal vulnerability exists in the com.dotmarketing.servlets.taillog.TailLogServlet.class file i...
Monsta Box WebFTP Arbitrary File Read
Application ----------- "MONSTA Box is a lightweight open-source file manager you can install on your website or server to easily manage your files through any browser." Description from the official website http://www.monstahq.com/ Vulnerability ------------- The Monsta Box WebFTP application...
SAP NetWeaver Java AS Directory Traversal Vulnerability
SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A directory traversal vulnerability exists in SAP NetWeaver Java AS version 7.4, which can be exploited by remote attackers to read arbitrary files...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities | | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...
KingCms v9 /api/conn.php 目录遍历及任意文件读取漏洞（无需截断）
No description provided by source...
CVE-2016-1789
Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
D-Link 2750u/2730u /cgi-bin/webproc 任意文件读取
No description provided by source...
Apache OpenMeetings FileService Arbitrary File Read Vulnerability
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. An Arbitrary File Read Exposure...
The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to trigger a service failure or read arbitrary files.
The vulnerability of the XML parser in the IBM WebSphere Portal user interface relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files or cause service failures by declaring external links that are related ...