7969 matches found
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
Directory Traversal
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
GitLab: Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities
I was digging through the gitlab-foss repository and noticed an interested pattern that seems to be adopted in a few places: the use of Forwardable with meta-programming over delegators, explicit attrreader methods or methodmissing. Heads up: the arbitrary file read vulnerability I demonstrate in...
Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371
A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files...
Arbitrary File Read Vulnerability in SiteServerCMS
SiteServerCMS is a content management system developed by Beijing Baiyong Qianwei Software Technology Development Co. SiteServerCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive system information...
Arbitrary File Read Vulnerability in EAA Application Access System of Shaanxi Yihe Information Technology Development Co.
EAA Application Access System is a virtual application management platform that provides virtual application access based on the VA Enterprise Engine. Ltd. EAA Application Access System suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to obtain sensitive...
Exploit for Path Traversal in Zohocorp Manageengine_Opmanager
CVE-2020-12116 Proof of concept code to exploit CVE-2020-1211...
Zoho ManageEngine OpManager Information Disclosure Vulnerability (CNVD-2020-28455)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An information disclosure vulnerability exists in Zoho ManageEngine OpManager. The vulnerability can be exploited to read arbitrary files with the help of a specially crafted request...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request...
CVE-2020-5744
Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk...
CVE-2020-8982
An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...
CVE-2020-8982
An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...
CVE-2020-8982
Summary: CVE-2020-8982 affects Citrix ShareFile StorageZones (Controller) versions through at least 5.10.x. It constitutes an unauthenticated arbitrary file read that can grant access to files stored in ShareFile or Citrix Cloud deployments. The issue’s exploitability depends on the storage zone ...
Arbitrary File Read
Overview curlrequest is a curlrequest is a node wrapper for the command line curl1. Affected versions of this package are vulnerable to Arbitrary File Read. It is possible to read any file by populating the file parameter with user input. PoC var curl = require"curlrequest"; let userPayload =...
CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. Recent assessments: Mad-robot at July 05, 2020 1:47pm UTC reported: Unauthenticated arbitrary file read on...
GitLab 12.9.0 - Arbitrary File Read Exploit
Exploit for ruby platform in category web applications Exploit Title: GitLab 12.9.0 - Arbitrary File Read Exploit Author: KouroshRZ Vendor Homepage: https://about.gitlab.com Software Link: https://about.gitlab.com/install Version: tested on gitlab version 12.9.0 Tested on: Ubuntu 18.04 but it's O...
GitLab 12.9.0 - Arbitrary File Read
Exploit Title: GitLab 12.9.0 - Arbitrary File Read Google Dork: - Date: 2020-05-03 Exploit Author: KouroshRZ Vendor Homepage: https://about.gitlab.com Software Link: https://about.gitlab.com/install Version: tested on gitlab version 12.9.0 Tested on: Ubuntu 18.04 but it's OS independent CVE : -...