ProjectSend r582 - Multiple Vulnerabilities

Advisory ID: SGMA-16001 Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object Reference Risk level: 4 / 5 Credit:...

Kozea Radicale Arbitrary File Access Vulnerability

Kozea Radicale is a free and open source CalDAV and CardDAV server solution. Kozea Radicale fails to adequately filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting special requests to access arbitrary files...

Kodi 15 - Arbitrary File Aaccess (Web Interface) Vulnerability

Kodi 15 reintroduced an arbitrary file access vulnerability. Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report:...

Kodi 15 - Web Interface Arbitrary File Access

Kodi 15 - Web Interface Arbitrary File Access Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305...

Kodi 15 Arbitrary File Access

Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305 Version: v15 Tested on: linux CVE : n/a kodi...

Kodi 15 - Web Interface Arbitrary File Access

Exploit Title: arbitrary file access kodi web interface Shodan dork: title:kodi Date: 25-11-2015 Contact: https://twitter.com/mpronk89 Software Link: http://kodi.tv/ Original report: http://forum.kodi.tv/showthread.php?tid=144110&pid=2170305pid2170305 Version: v15 Tested on: linux CVE : n/a kodi...

TYPO3 Zend Framework Integration扩展任意文件访问漏洞

No description provided by source...

TYPO3 Zend Framework Integration Extension Arbitrary File Access Vulnerability

TYPO3 is the Swiss TYPO3 Association maintains a set of free open source content management system framework CMS/CMF.TYPO3 Zend Framework Integration is one of the integrated Zend Framework extension plug-ins . An arbitrary file access vulnerability exists in TYPO3 Zend Framework Integration...

USN-2793-1 libreoffice vulnerabilities

Federico Scrinzi discovered that LibreOffice incorrectly handled documents inserted into Writer or Calc via links. If a user were tricked into opening a specially crafted document, a remote attacker could possibly obtain the contents of arbitrary files. CVE-2015-4551 It was discovered that...

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

CVE-2015-7601

The CVE-2015-7601 entry describes a directory traversal vulnerability in PCMan FTP Server 2.0.7 that allows remote attackers to read arbitrary files by crafting a RETR command containing traversal strings such as ..//. Connected sources confirm the affected product and the traversal-based disclos...

gollum Upload File Functionality Permits Arbitrary File Access

The gollum gem contains a flaw in its upload file functionality that can allow arbitrary file access. This occurs due to a lack of type checking when handling temporary files during the upload process...

Vulnerability of iOS and Mac OS X operating systems, allowing attackers to read arbitrary files

The vulnerability of the Office Viewer component for iOS and Mac OS X lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted XML document containing links to external objects...

The vulnerability of the Firefox OS operating system, as well as the Firefox and Firefox ESR browsers, allows attackers to circumvent access restrictions, read arbitrary files, and increase their privileges.

The vulnerability of the PDF reader component in the Firefox OS operating system, as well as in Firefox and Firefox ESR browsers, is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls, read arbitrary files, and...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

Exploit for hardware platform in category local exploits +-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B...

Thomsom Cable Modem TWG850-4B ST9C.05.08 Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: 0rwelllabs +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +- Hardwar...

OpenStack Image Service (kilo) Directory Traversal Vulnerability

OpenStack is the massively scalable cloud operating system. A directory traversal vulnerability in OpenStack Image Service 2015.1.x version kilo prior to 2015.1.2 allows an authenticated, remote user to read arbitrary files from a backup file created with the "qcow2" image...

Firefox < 39.0.3 PDF Reader Arbitrary File Access (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitiv...

Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access

The version of Firefox ESR installed on the remote Windows host is prior to 38.1.1. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to...