Arbitrary File Read Vulnerability in Lanproxy Intranet Penetration Tool

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy Intranet...

CVE-2021-21602: Improper Link Resolution Before File Access

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

CVE-2021-1145: UNIX Symbolic Link (Symlink) Following

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

Cisco Anyconnect Secure Mobility Client 权限许可和访问控制问题漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. An arbitrary file read vulnerability exists in the upgrade component of the Cisco AnyConnect Secure Mobility Client, which can be exploited by a...

Cisco StarOS for Cisco ASR 5000 Series Routers 后置链接漏洞

Cisco StarOS is a router operating system that controls the entire system logic and can control processes and CLIs. An arbitrary file read vulnerability exists in Secure FTP SFTP in Cisco StarOS versions prior to 21.19.7 used in Cisco ASR 5000 series routers, which can be exploited by an attacker...

CVE-2021-1258: Improper Privilege Management

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system OS of an affected device. The vulnerability is due to insufficient file permission...

PT-2021-1674

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client affected versions not specified Description A vulnerability in the upgrade component could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating...

PT-2021-1769

Name of the Vulnerable Software and Affected Versions: Cisco StarOS for Cisco ASR 5000 Series Routers affected versions not specified Description: The issue is related to insecure handling of symbolic links in the Secure FTP SFTP implementation of Cisco StarOS for Cisco ASR 5000 Series Routers...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description Medium SECURITY-1452 / CVE-2021-21602 Arbitrary file read vulnerability in workspace browsers High SECURITY-1889 / CVE-2021-21603 XSS vulnerability in notification bar High SECURITY-1923 / CVE-2021-21604 Improper handling of REST API XML deserialization erro...

Exploit for Files or Directories Accessible to External Parties in Apache Flink

Vulnerable Application This module exploits an unauthenticate...

Apache Flink 1.11.0 Arbitrary File Read / Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Flink File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in Apache Fli...

Apache Flink suffers from an arbitrary file read vulnerability (CNVD-2021-03406)

Apache Flink is efficient and distributed general purpose data processing platform. Apache Flink suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Flink File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in Apache Fli...

CVE-2020-13449: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files...

Apache Flink Arbitrary File Read Vulnerability

Apache Flink is efficient and distributed general purpose data processing platform. Apache Flink products have an arbitrary file read vulnerability that can be exploited by an attacker to read sensitive files on the server and with the help of hard-coded credentials exploit the vulnerability to...

CVE-2020-36051

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...

CVE-2020-36051

CVE-2020-36051 affects MiniCMS V1.10. The vulnerability is a directory traversal flaw in page_edit.php via the state parameter, allowing remote attackers to read arbitrary files on the affected system. Impact is read access to sensitive files; no exploit details or in-the-wild exploitation are pr...

CVE-2020-36051: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...

PT-2021-11911

Name of the Vulnerable Software and Affected Versions: MiniCMS version V1.10 Description: The issue allows remote attackers to read arbitrary files via the state parameter in the page edit.php file. This enables access to sensitive information. Recommendations: For MiniCMS version V1.10, consider...

Apache Flink 安全漏洞

Apache Flink is efficient and distributed general purpose data processing platform. Apache Flink products have an arbitrary file read vulnerability that can be exploited by an attacker to read sensitive files on the server and with the help of hard-coded credentials exploit the vulnerability to...