The vulnerability of the ~/.apport-ignore.xml file, which is part of the apport error reporting service, allows a hacker to read arbitrary files.

The vulnerability of the /.apport-ignore.xml file of the apport error reporting service arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to read arbitrary files...

Arbitrary File Read Vulnerability in EDI CMS

ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file read vulnerability that can be exploited by an attacker to read configuration files on the server...

Cisco UCS Director Path Traversal Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. A path traversal vulnerability exists in the REST API endpoint in Cisco UCS Director, which stems from the program's failure to adequately validate user input sent to the REST API, and ca...

Internet Bug Bounty: Windows only: arbitrary file read vulnerability in openssl s_server

==Copied from an email sent to [email protected] on August 15, 2019== Hi, There's an arbitrary file read vulnerability present in openssl sserver when ran on Windows with the -WWW or -HTTP option. To reproduce: run openssl sserver -tls1 -WWW -accept 443 run .\curl.exe -k...

Oracle WebLogic Coherence SimpleDocument XXE Vulnerability

WebLogic is an application server produced by Oracle Corporation of the United States, is a JAVAEE architecture-based middleware, WebLogic is used to develop, integrate, deploy and manage large-scale distributed Web applications, network applications and database applications. WebLogic is used to...

XML Entity Injection Vulnerability in WebLogic SimpleDocument

Oracle WebLogic Server is a Java application server that fully implements the J2EE 1.5 specification, the latest Web services standards, and the highest level of interoperability standards. An XML entity injection vulnerability exists in WebLogic SimpleDocument, which can be exploited to send a...

Webtateas 2.0 Arbitrary File Read

Exploit Title: Webtateas 2.0 - Arbitrary File Read Date: 2020-04-12 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link: http://webtareas.sourceforge.net/general/home.php Version:...

Webtateas 2.0 - Arbitrary File Read

Exploit Title: Webtateas 2.0 - Arbitrary File Read Date: 2020-04-12 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link: http://webtareas.sourceforge.net/general/home.php Version:...

CVE-2020-11738

The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit. Recent assessments: kevthehermit at April 14, 2020 2:38pm UTC reported: This plugin is recorded as havin...

Webtateas 2.0 - Arbitrary File Read Vulnerability

Exploit for php platform in category web applications Exploit Title: Webtateas 2.0 - Arbitrary File Read Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link:...

Zen Load Balancer 'index.cgi' Directory Traversal Vulnerability

Zen Load Balancer is a complete load balancing solution that provides high availability for TCP, UDP, advanced HTTP and HTTPS services, and data line communications uplinks. A directory traversal vulnerability exists in Zen Load Balancer 'index.cgi'. An attacker can exploit the vulnerability to...

Arbitrary File Read

thunderbird is vulnerable to arbitrary file read. Two flaws were found in the way Thunderbird displayed blocked popup windows. If a user can be convinced to open a blocked popup, it is possible to read arbitrary local files, or conduct an XSS attack against the user...

Arbitrary File Read Vulnerability in Panabit Intelligent Application Gateway Internet Café Version of Beijing PaiNet Software Co.

Panabit Intelligent Application Gateway is able to analyze and provide real-time statistics on the distribution of current network traffic, pinpointing specific application clients. Ltd. Panabit Intelligent Application Gateway Internet Cafe Edition has an arbitrary file reading vulnerability, whi...

Arbitrary File Read Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any file on the server and disclose sensitive information...

CVE-2017-18648

An issue was discovered on Samsung mobile devices with KK4.4.x, L5.x, M6.x, and N7.x software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 November 2017...

Apport Arbitrary File Read Vulnerability

Apport is a toolkit for collecting and giving feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Apport. A local attacker can exploit this vulnerability by performing a symbolic link attack to read arbitrar...

Arbitrary File Read Vulnerability in the Background of Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file read vulnerability exists in the background of Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...

Arbitrary File Read Vulnerability in Gila CMS

Gila CMS is an open source content management system. Gila CMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in TRS WAS at TORS Information Technology Inc.

TORS Information Technology Co. is a provider of artificial intelligence and big data technology and data services. An arbitrary file read vulnerability exists in the TRS WAS of TORS Information Technology Co. that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in kitecms 5.1.38

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , suitable for individuals, enterprises to quickly build stations and development needs. kitecms 5.1.38 there is an arbitrary file reading vulnerability , attackers...