TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)

Exploit Title: TermTalk Server 3.24.0.2 - Arbitrary File Read Unauthenticated Date: 03/01/2022 Exploit Author: Fabiano Golluscio @ Swascan Vendor Homepage: https://www.solari.it/it/ Software Link: https://www.solari.it/it/solutions/other-solutions/access-control/ Version: 3.24.0.2 Fixed Version:...

GitLab: Arbitrary file read via the bulk imports UploadsPipeline

Summary The bulk imports api does not remove symlinks when untaring the uploads.tar.gz file, allowing arbitrary files to be read and uploaded when importing a group. When a group has uploads such as markdown attachments, an uploads.tar.gz file will be downloaded and extracted in the...

CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function...

CVE-2021-45789

CVE-2021-45789 affects Metersphere v1.15.4, where authenticated users can read arbitrary files on the server via the file download function. The vulnerability details indicate impact to confidentiality (high) with no stated impact on integrity or availability. The available connected sources desc...

PT-2021-24297 · Unknown · Metersphere

Name of the Vulnerable Software and Affected Versions: Metersphere version 1.15.4 Description: An arbitrary file read issue was found, allowing authenticated users to read any file on the server via the file download function. Recommendations: For Metersphere version 1.15.4, consider restricting...

U.S. Dept Of Defense: Arbitrary File Read at ███ via filename parameter

Arbitrary file reads with multiple endpoint on a DoD public facing asset...

Remote Code Execution (RCE)

Overview com.bstek.ureport:ureport2-console is an UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells. Affected versions of this package are vulnerable to Remote Code...

The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to incorrect path name restrictions in access-controlled directories. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

Exploit for Path Traversal in Grafana

CVE-2021-43798 Grafana任意文件读取 1.installation shell pip3...

GHSA-VX6J-PJRH-VGJH PHP file inclusion in the Sulu admin panel

Impact What kind of vulnerability is it? Who is impacted? An attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. Compromised components: Arbitrary file read on the server, Potential Remote code execution Exploitation...

CVE-2021-43836

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is patched with the Versions 1.6.44, 2.2.18...

CVE-2021-43836

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is patched with the Versions 1.6.44, 2.2.18...

UpdateStar HD-Network Real-time Monitoring System 路径遍历漏洞

UpdateStar HD-Network Real-time Monitoring System is a high-definition network real-time monitoring system from UpdateStar, a German company. updateStar HD-Network Real-time Monitoring System in version 2.0 is vulnerable to path traversal vulnerability, which stems from the failure of a network...

CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

WordPress 插件路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. True Ranker plugin is a WordPress open source application plugin. WordPress True Ranker plugin has a path traversal...

WordPress True Ranker plugin <= 2.2.2 - Directory Traversal/Arbitrary File Read vulnerability

Directory Traversal/Arbitrary File Read vulnerability discovered by p7e4 in WordPress True Ranker plugin versions = 2.2.2. Solution Update the WordPress True Ranker plugin to the latest available version at least 2.2.4...

Exploit for Incorrect Authorization in Apache Druid

CVE-2021-36749 Apache Druid LoadData arbitrary file reading...

Exploit for Path Traversal in Grafana

CVE-2021-43798 CVE-2021-43798 is a vulnerability marked as Hi...

Grafana 8.3.0 - Directory Traversal and Arbitrary File Read Exploit

Exploit Title: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read Exploit Author: s1gh Vendor Homepage: https://grafana.com/ Vulnerability Details: https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p Version: V8.0.0-beta1 through V8.3.0 Description: Grafana version...