CVE-2017-7424

A Path Traversal CWE-22 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from deficiencies in access control and the disclosure of information in error messages, allowing attackers to read arbitrary files.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system stems from deficiencies in access control and the disclosure of information in error messages. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

CVE-2017-1469

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468...

CVE-2017-1469

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-Force ID: 128468...

Server side request forgery (ssrf)

Server-side request forgery SSRF vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI...

Fortinet FortiManager Information Disclosure Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

Design/Logic Flaw

Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability...

BusyBox Path Traversal Vulnerability

BusyBox is a utility package for UNIX programs maintained by software developer Denys Viasenko.BusyBox implementation of tar is an implementation of the tar file backup command. A path traversal vulnerability exists in the BusyBox implementation of tar. A remote attacker can exploit this...

CVE-2015-0783

The FileViewer class in Novell ZENworks Configuration Management ZCM allows remote authenticated users to read arbitrary files via the filename variable...

Design/Logic Flaw

The FileViewer class in Novell ZENworks Configuration Management ZCM allows remote authenticated users to read arbitrary files via the filename variable...

CVE-2015-0783

The FileViewer class in Novell ZENworks Configuration Management ZCM allows remote authenticated users to read arbitrary files via the filename variable...

CVE-2015-0781

CVE-2015-0781 describes a directory traversal vulnerability in the doPost method of the Rtrlet class within Novell ZENworks Configuration Management (ZCM). The root cause is the failure to sanitize the path of uploaded files, enabling an attacker to upload and potentially place arbitrary files on...

DALIM SOFTWARE ES Core 5.0 build 7184.1 Multiple Remote File Disclosures

Summary ES is the new Enterprise Solution from DALIM SOFTWARE built from the successful TWIST, DIALOGUE and MISTRAL product lines. The ES Core is the engine that can handle project tracking, JDF device workflow, dynamic user interface building, volume management. Each ES installation will have...

Xxe

XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...

CVE-2016-4456

The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...

CVE-2010-2245

XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...

Directory traversal

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter...

CVE-2017-11152

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter...

CVE-2017-11152

CVE-2017-11152 is a directory traversal vulnerability in Synology Photo Station (PixlrEditorHandler.php) affecting versions prior to 6.7.3-3432 and 6.3-2967, enabling remote attackers to write arbitrary files via the path parameter. Connected sources describe a broader 4-vulnerability chain (CVE-...

Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications ''' Source: https://blogs.securiteam.com/index.php/archives/3356 Vulnerability details The remote code execution is a combination of 4 different vulnerabilities: Upload arbitrary files to the specified directories Log in with a fake...