7967 matches found
School ERP Pro 1.0 - Arbitrary File Read Vulnerability
Exploit for php platform in category web applications Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT...
CVE-2020-8479
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...
SSYCMS UGC Contributor Edition suffers from arbitrary file read vulnerability
SSYCMS is a free and open source commercial content management system. SSYCMS UGC Submission Edition suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to arbitrarily read server files...
School ERP Pro 1.0 Arbitrary File Read
Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT CVE: N/A Vulnerable code:...
School ERP Pro 1.0 - Arbitrary File Read
Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT CVE: N/A Vulnerable code:...
SSYCMS has an arbitrary file read vulnerability
SSYCMS is a free and open source commercially available content management system. SSYCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to access any file on the server and obtain sensitive information...
CVE-2017-18712
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0....
Alibaba Nacos Has Arbitrary File Read Vulnerability
Nacos is Alibaba open source microservice registration and configuration distribution center . Alibaba Nacos has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information on a website...
NETGEAR DST6501 and WNR2000 Information Disclosure Vulnerability
NETGEAR WNR2000 and NETGEAR DST6501 are both products of NETGEAR, Inc. NETGEAR WNR2000 is a wireless router and NETGEAR DST6501 is a wireless extender adapter.NETGEAR DST6501 versions prior to 1.1.0.6 and A security vulnerability exists in versions prior to WNR2000v2 1.2.0.8. An attacker could...
CVE-2017-18766
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8...
CVE-2017-18766
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8...
CVE-2017-18766
CVE-2017-18766 affects NETGEAR DST6501 (< 1.1.0.6) and WNR2000v2 (
CVE-2017-18769
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX6200v2 before 1.0.1.50,...
CVE-2017-18769
CVE-2017-18769 affects a broad set of NETGEAR devices where an attacker can read arbitrary files. The public descriptions enumerate affected models and firmware ranges (e.g., D6220 < 1.0.0.40, D6400 < 1.0.0.74, D7000 < 1.0.1.60, D7800 < 1.0.1.34, D8500
Schneider Electric Modicon Quantum Has Arbitrary File Read Vulnerability
The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process applications, high availability and safety solutions. An arbitrary file read vulnerability exists in the Schneider Electric Modicon Quantum. A remote attacker could exploit this vulnerability by...
CVE-2017-18847
Concrete details exist: CVE-2017-18847 affects NETGEAR devices including R6400v2 (<1.0.2.32), R7000P/R6900P (<1.0.0.56), R7900 (<1.0.1.18), R8300 (<1.0.2.100_1.0.82), R8500 (<1.0.2.100_1.0.82), and D8500 (
GNOME Evolution Arbitrary File Read Vulnerability
GNOME Evolution is a suite of email client programs for the Gnome desktop environment for Linux. The program provides Email, calendar, meeting scheduling, contact management and more. A security vulnerability exists in versions prior to GNOME Evolution 3.35.91. An attacker can exploit this...
jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.
A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the mysql gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLASS...
The vulnerability of the ~/.apport-ignore.xml file, which is part of the apport error reporting service, allows a hacker to read arbitrary files.
The vulnerability of the /.apport-ignore.xml file of the apport error reporting service arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to read arbitrary files...