CVE-2021-1532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

Esri GeoEvent Server 路径遍历漏洞

Esri GeoEvent Server is a network appliance from Esri, Inc. used to track mobile assets, monitor fixed sensors, follow social media feeds, leverage on maps, analyze and display real-time data and Internet of Things IoT data.Esri GeoEvent Server is vulnerable to a path traversal vulnerability that...

Arbitrary File Read Vulnerability in SDCMS

SDCMS is a PHP 3-in-1 website management system. SDCMS has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive server information...

PT-2021-18585 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-plus 小说精品屋-plus version 3.5.1 Description: The issue allows attackers to read arbitrary files via the filePath parameter in the fileDownload function located in com/java2nb/common/controller/FileController.java. This enables access to...

Arbitrary File Read Vulnerability in Novelty House-plus

Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . Novel-plus has an arbitrary file read vulnerability that can be exploited by an attacker to read any file in the system...

Arbitrary File Read Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. There is an arbitrary file read vulnerability in Kingdee EAS, which can be exploited by attackers to obtain sensitive information...

SonicWall Email Security 10.0.x < 10.0.9.6173 / 6177 Multiple Vulnerabilities

According to its self-reported version, the remote SonicWall Email Security is affected by multiple vulnerabilities: - A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host...

Arbitrary File Read Vulnerability in Deephaven Contact Center Agent Management System

Ltd. is a high-tech enterprise focusing on the research, development, manufacturing and sales of contact center and converged communication products with communication as the core. An arbitrary file read vulnerability exists in the Deephaven Contact Center agent management system, which can be...

Kingdee Cloud-Star has Arbitrary File Read Vulnerability

Kingdee Cloud-Star is a new generation of strategic enterprise management software developed by Kingdee Software China Co. Ltd. based on cutting-edge technologies such as cloud computing, big data, social networking, artificial intelligence and Internet of Things. There is an arbitrary file read...

Arbitrary File Read Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

Arbitrary File Read Vulnerability in Fusion Router K3

Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. An arbitrary file read vulnerability exists in Fusion Router K3, which can be exploited by attackers to...

Arbitrary File Read Vulnerability in Device Access Gateway of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file read vulnerability exists in the device access gateway of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Arbitrary File Read Vulnerability in Fusion Router K3C

Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. An arbitrary file read vulnerability exists in Fusion Router K3C, which can be exploited by attackers t...

HedgeDoc 路径遍历漏洞

HedgeDoc is a Javascript-based real-time editing and sharing platform for Markdown documents from the HedgeDoc team. A path traversal vulnerability exists in HedgeDoc, which allows an attacker to read an arbitrary .md file from the server's filesystem to perform relative path traversal...

Arbitrary File Read Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Exploit for Path Traversal in Mikrotik Routeros

WinboxExploit This is a proof of concept of the critical WinBo...

Arbitrary File Read Vulnerability in LightCMS

LightCMS is a lightweight content management system CMS that can also be used as a general-purpose back-office management framework. An arbitrary file read vulnerability exists in LightCMS, which can be exploited by an attacker to read arbitrary files...

PHP Proxy Arbitrary File Read (CVE-2018-19458)

An arbitrary file read vulnerability exists in PHP Proxy. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to access and read arbitrary file...

Hasura GraphQL 1.3.3 Arbitrary File Read

Exploit Title: Hasura GraphQL 1.3.3 - Local File Read Software: Hasura GraphQL Software Link: https://github.com/hasura/graphql-engine Version: 1.3.3 Exploit Author: Dolev Farhi Date: 4/19./2021 Tested on: Ubuntu import requests import sys HASURASCHEME = 'http' HASURAHOST = '192.168.1.1' HASURAPO...