CVE-2015-7601

The CVE-2015-7601 entry describes a directory traversal vulnerability in PCMan FTP Server 2.0.7 that allows remote attackers to read arbitrary files by crafting a RETR command containing traversal strings such as ..//. Connected sources confirm the affected product and the traversal-based disclos...

gollum Upload File Functionality Permits Arbitrary File Access

The gollum gem contains a flaw in its upload file functionality that can allow arbitrary file access. This occurs due to a lack of type checking when handling temporary files during the upload process...

Vulnerability of iOS and Mac OS X operating systems, allowing attackers to read arbitrary files

The vulnerability of the Office Viewer component for iOS and Mac OS X lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted XML document containing links to external objects...

The vulnerability of the Firefox OS operating system, as well as the Firefox and Firefox ESR browsers, allows attackers to circumvent access restrictions, read arbitrary files, and increase their privileges.

The vulnerability of the PDF reader component in the Firefox OS operating system, as well as in Firefox and Firefox ESR browsers, is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls, read arbitrary files, and...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

Exploit for hardware platform in category local exploits +-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B...

Thomsom Cable Modem TWG850-4B ST9C.05.08 Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: Glaysson dos Santos +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +...

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

+-//////////////////////////////////////////////////////////////////////////// +- +- Exploit Title: Thomson Wireless VoIP Cable Modem Arbitrary File Access +- Date: October 22, 2013 +- Author: 0rwelllabs +- +- Product: TWG850-4B Wireless VoIP Cable Modem +- Software Version: ST9C.05.08 +- Hardwar...

OpenStack Image Service (kilo) Directory Traversal Vulnerability

OpenStack is the massively scalable cloud operating system. A directory traversal vulnerability in OpenStack Image Service 2015.1.x version kilo prior to 2015.1.2 allows an authenticated, remote user to read arbitrary files from a backup file created with the "qcow2" image...

Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access (Mac OS X)

The version of Firefox ESR installed on the remote Mac OS X host is prior to 38.1.1. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to...

Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access

The version of Firefox ESR installed on the remote Windows host is prior to 38.1.1. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to...

Firefox < 39.0.3 PDF Reader Arbitrary File Access

The version of Firefox installed on the remote Windows host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitive...

Firefox < 39.0.3 PDF Reader Arbitrary File Access (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitiv...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to read and execute arbitrary files.

The vulnerability of the Tivoli Storage Manager FastBack data management program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read and execute arbitrary files by sending specially crafted TCP packets...

S3Bubble <= 0.7 - Directory Traversal leading to Arbitrary File Access

The last time it was checked the plugin was still affected and had been closed...

Zarafa Collaboration Platform Arbitrary File Access Vulnerability

Zarafa Collaboration Platform is prone to an arbitrary file access vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authorization Bypass Vulnerability in RG-NBR Series Gateways of Riptide Networks

Ruijie Networks, is a leading brand of network solutions in China. As a national enterprise, Ruijie Networks adheres to the road of independent research and development, and opens up a unique avenue of innovation in the highly competitive network equipment market. The vendors represented by Ruiji...

Nakid CMS Local File Inclusion Vulnerability

Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a local file inclusion vulnerability that allows an attacker to read arbitrary files...

PHP null pointer has multiple security restriction bypass vulnerabilities

PHP is a general-purpose scripting language. A security vulnerability exists in PHP due to a missing path in multiple extensions or null byte checking of the path parameter of certain functions. Allowing remote attackers to exploit this vulnerability could allow PHP scripts to access arbitrary...

IBM Marketing Operations Catalog Traversal Vulnerability

IBM Marketing Operations formerly known as IBM Unica Marketing Operations is a suite of marketing management software from the American company IBM. The software supports streamlining of production processes, tracking of budgets and expenditures, and improved teamwork. A directory traversal...

The vulnerability of the FTP server ProFTPD, which allows a remote intruder to gain access to protected information

The vulnerability in the mod-copy module of the ProFTPD FTP server may allow a malicious actor to read and write arbitrary files using CPRF and CTPO commands...