Ruby 参数注入漏洞

Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the individual developer, Yukihiro Matsumoto. A parameter injection vulnerability exists in Ruby versions prior to 1.4.0, which can be exploited by an attacker to read and write arbitrary files via a crafted UR...

Exploit for Argument Injection in Dragonfly_Project Dragonfly

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

Exploit for Argument Injection in Dragonfly_Project Dragonfly

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...

Arbitrary File Read Vulnerability in PublicCMS

Public CMS is the use of 2020 mainstream technology development of open-source JAVA CMS products , support for full-site static , SSI, dynamic pages partially static , multi-site , auto-installation and other features of the content management system . PublicCMS has an arbitrary file read...

Directory Traversal

Overview startserver is a Yet another http server Affected versions of this package are vulnerable to Directory Traversal due to missing sanitization. PoC curl --path-as-is --url "http://localhost:8080/../../../../etc/passwd" Details A Directory Traversal attack also known as path traversal aims ...

Arbitrary File Read Vulnerability in Lingluogu Technology Warehouse Management System

Warehouse Management System is an open source project led by Lingluogu Technology , in order to reduce the cost of logistics and warehousing enterprise information technology and so on. Linglu Valley Technology warehouse management system there is an arbitrary file read vulnerability , attackers...

Arbitrary File Read

redmine allows arbitrary file read. Insufficient input validation in the Git repository allows users to read arbitrary local files that are accessible by the application server process...

Arbitrary File Read Vulnerability in ACTi Web Configurator

ACTi is a business intelligence service provider. An arbitrary file read vulnerability exists in ACTi Web Configurator, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. An arbitrary file read vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to read arbitrary files...

Arbitrary File Read Vulnerability in EG Easy Gateway WEB Management System of Ruijie Networks Corporation (CNVD-2021-36495)

Ruijie EasyGate is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress problems. An arbitrary file read vulnerability exists in the EG EasyGate WEB management system of Ruijie Networks Corporation, which can be exploited by attackers to obtai...

Adobe Acrobat 缓冲区错误漏洞

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to read arbitrary file systems...

Arbitrary File Read Vulnerability in Education Cloud Portal of Tianwen Digital Media Technology (Beijing) Co.

Tianwen Digital Media Technology Beijing Co., Ltd. is a subsidiary of Zhongnan Media, a state-controlled national high-tech enterprise and Zhongguancun high-tech enterprise. There is an arbitrary file read vulnerability in Tianwen Digital Media Technology Beijing Co., Ltd.'s Education Cloud Porta...

Arbitrary File Read Vulnerability in GlassFish

GlassFish is a robust business compatible application server. GlassFish suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An arbitrary file read vulnerability exists in the AmarALS Credit Risk Management System, which could be exploited by an attacker to obtain...

Emissary 安全漏洞

Emissary is a software application. A P2P-based data-driven workflow engine that runs across heterogeneous and potentially widely distributed multi-tier P2P network computing resources. An information disclosure vulnerability exists in Emissary version 5.9.0, which can be exploited by an attacker...

CVE-2021-1532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

CVE-2021-1532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

Esri GeoEvent Server 路径遍历漏洞

Esri GeoEvent Server is a network appliance from Esri, Inc. used to track mobile assets, monitor fixed sensors, follow social media feeds, leverage on maps, analyze and display real-time data and Internet of Things IoT data.Esri GeoEvent Server is vulnerable to a path traversal vulnerability that...