Directory traversal

GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read...

CVE-2020-10086

Removed by vendor...

CVE-2020-10086

GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read...

PT-2020-11911 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.4 through 12.8.1 Description: The issue allows Directory Traversal, which leads to arbitrary file read. A particular endpoint was vulnerable to a directory traversal vulnerability. Recommendations: For GitLab versions 10.4...

CVE-2020-10086

GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read. Recent assessments: ericalexanderorg at March 16, 2020 3:52pm UTC reported: Not enough information to accurately assess ATM. Potentia...

CVE-2020-0863

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka ‘Connected User Experiences and Telemetry Service Information Disclosure Vulnerability’. Recent assessments: bwatters-r7 at December 21, 2020 10:03pm UTC...

Unauthorized Access Vulnerability in RG-RSR20-14E

The RG-RSR20-14E is a multi-service router. An unauthorized access vulnerability exists in the RG-RSR20-14E. An attacker can exploit this vulnerability to read arbitrary files beyond the authority...

Cisco Adaptive Security Appliance Software CLI Arbitrary File Read and Write Vulnerability (cisco-sa-20200226-fxos-cli-file)

According to its self-reported version, Adaptive Security Appliance ASA Software is affected by an arbitrary file read and write vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, via crafted arguments on a specific CLI command, to re...

Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability (cisco-sa-20200226-fxos-cli-file)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by an arbitrary file read and write vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, via crafted arguments on a specific CLI comman...

Arbitrary file reading vulnerability in zzzzphp

zzphp is a content management system CMS. An arbitrary file read vulnerability exists in zzzphp, which can be exploited by an attacker to read arbitrary files to obtain sensitive information...

Arbitrary File Read Vulnerability in jpress

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. jpress there is an arbitrary...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage:...

Arbitrary File Read Vulnerability in Born Creative OA System

Born Creative OA office system for the first domestic open source OA software producers, using the leading B / S architecture, cross-platform language php + mysql and other flexible applications, is one of China's most extensive user base of OA systems. Born Creative OA system there is an arbitra...

UniSharp Laravel File Manager 2.0.0 Arbitrary File Read

Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage: https://github.com/UniSharp/laravel-filemanager Software Link:...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Vulnerability

Exploit for php platform in category web applications Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Exploit Author: NgoAnhDuc Vendor Homepage:...

The vulnerability of the XMLBlueprint XML file editor, related to errors in processing .dtd files, allows a perpetrator to cause service failures or enable reading of arbitrary files.

The vulnerability of the XMLBlueprint XML editor is related to errors in processing .dtd files. Exploiting this vulnerability can allow a malicious actor to cause service failures or enable the reading of arbitrary files by running a specially crafted XML file...

PT-2020-10171 · Grafana +4 · Grafana +4

Name of the Vulnerable Software and Affected Versions: Grafana versions 6.4.3 and earlier Description: The issue allows an authenticated attacker with privileges to modify data source configurations to read arbitrary files. This can be exploited by an attacker who has the necessary permissions to...

Joplin Desktop 1.0.184 - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Joplin Desktop 1.0.184 - Cross-Site Scripting Exploit Author: Javier Olmedo Vendor: Laurent Cozic Software Link: https://github.com/laurent22/joplin/archive/v1.0.184.zip Affected Version: 1.0.184 and before Patched Version:...

Apache Tomcat 8.5.x < 8.5.51 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 or 7.0.0 to 7.0.99. It is, therefore, affected by multiple vulnerabilities : - An arbitrary file read vulnerability in AJP protocol due to an implementation defect which could also be leveraged to...

CVE-2020-3166 Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted...