Apache Flink 安全漏洞

Apache Flink is efficient and distributed general purpose data processing platform. Apache Flink products have an arbitrary file read vulnerability that can be exploited by an attacker to read sensitive files on the server and with the help of hard-coded credentials exploit the vulnerability to...

Dbhcms Has Arbitrary File Read Vulnerability

Dbhcms is a small PHP open source content management system for personal and small business websites. Dbhcms has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Wordpress Plugin Duplicator Arbitrary File Read Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An arbitrary file read vulnerability exists in the Wordpress plugin Duplicator. An attacker...

WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress W3 Total Cache File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability i...

Arbitrary File Read

Overview @sdscoep/web-review is a npm package which will compile reports consisting of multiple criteria. Affected versions of this package are vulnerable to Arbitrary File Read. It is possible to read arbitrary file by using the "file:///" URI as a url. PoC const webReview =...

Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)

A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Wordpress Duplicator 1.3.26 Plugin - Unauthenticated Arbitrary File Read Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...

Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...

Arbitrary File Read Vulnerability in Chemical Virtual Simulation Laboratory of Beijing Obier Software Technology Development Co.

Ltd. is a high-tech enterprise focusing on the development and promotion of computer simulation technology, virtual reality technology, network technology, mainly dedicated to providing virtual simulation software, network platform and supporting hardware equipment development and technical...

CVE-2020-7790 Arbitrary File Read

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF...

Changsha Mito Information Technology Co., Ltd. enterprise website building system suffers from arbitrary file reading vulnerability

Changsha Mito Information Technology Co., Ltd. enterprise station-building system is a suitable for enterprise station-building open source free CMS station-building system. Changsha Mito Information Technology Co., Ltd. enterprise website builder system has an arbitrary file read vulnerability,...

ALPINE-CVE-2020-29600

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501...

Arbitrary File Read Vulnerability in ZXR10 6800 Multiservice Router Web Management System

The ZXR10 6800 Multiservice Router is a new generation of high-performance multiservice router products launched by ZTE. An arbitrary file read vulnerability exists in the Web management system of the ZXR10 6800 Multiservice Router. An attacker can exploit the vulnerability by using... /...

Arbitrary File Read Vulnerability in Jeewx-Boot Free WeChat Butler Platform of Beijing National Torch Information Technology Co.

JeewxBoot is a free JAVA WeChat Butler platform that supports WeChat public numbers, small programs, WeChat third-party platforms, sweepstakes and more. Beijing Guo Torch Information Technology Co., Ltd Jeewx-Boot Free WeChat Butler Platform has an arbitrary file read vulnerability that can be...

Arbitrary File Read Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA Network Technology Co. Founded in 1988, UFIDA is an advanced global provider of cloud services, software, and financial services for enterprises and public organizations. An arbitrary file read vulnerability exists in the UFIDA NC-IUFO Reporting System, which can be exploited by attackers t...

Gitlab 12.9.0 Arbitrary File Read

Exploit Title: Gitlab 12.9.0 - Arbitrary File Read Authenticated Google Dork: - Date: 11/15/2020 Exploit Author: Jasper Rasenberg Vendor Homepage: https://about.gitlab.com Software Link: https://about.gitlab.com/install Version: tested on gitlab version 12.9.0 Tested on: Kali Linux 2020.3 You can...

Gitlab 12.9.0 - Arbitrary File Read (Authenticated)

Exploit Title: Gitlab 12.9.0 - Arbitrary File Read Authenticated Google Dork: - Date: 11/15/2020 Exploit Author: Jasper Rasenberg Vendor Homepage: https://about.gitlab.com Software Link: https://about.gitlab.com/install Version: tested on gitlab version 12.9.0 Tested on: Kali Linux 2020.3 You can...

jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read arbitrary files

Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system...

CVE-2020-23490

There is a local file disclosure vulnerability in AVideo

October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)

Exploit Title: October CMS Build 465 - Arbitrary File Read Exploit Authenticated Date: 2020-03-31 Exploit Author: Sivanesh Ashok Vendor Homepage: https://octobercms.com/ Version: Build 465 and below Tested on: Windows 10 / XAMPP / October CMS Build 465 CVE: CVE-2020-5295 echo ''' Authenticated...