EulerOS 2.0 SP3 : libvirt (EulerOS-SA-2019-2020)

According to the versions of the libvirt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API CVE-2019-10161 - libvirt: arbitrary command execution via...

Arbitrary File Read Vulnerability in ShopXO

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO arbitrary file read vulnerability, an attacker can use this vulnerability to obtain any file on the server...

CVE-2019-15138

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL...

CVE-2019-15138

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL...

Design/Logic Flaw

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL...

CVE-2019-15138

CVE-2019-15138 affects the Node.js module html-pdf (v2.2.0). The vulnerability allows an arbitrary file read by processing an HTML file that uses an XMLHttpRequest to access a file:/// URL, enabling the server to exfiltrate local files (e.g., /etc/passwd). Public references in the Connected docum...

CVE-2019-14914

An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadatadel method, leading to an arbitrary file read and deletion via Directory Traversal...

CVE-2019-14914

An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadatadel method, leading to an arbitrary file read and deletion via Directory Traversal...

CVE-2019-14914

An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadatadel method, leading to an arbitrary file read and deletion via Directory Traversal...

CVE-2019-14914

CVE-2019-14914 affects PRiSE adAS 1.7.0. The vulnerability arises from an improperly escaped path in the medatadata_del method, enabling Directory Traversal that can cause arbitrary file reads and deletions. Documents confirm the issue and its impact but do not provide exploitation details, affec...

Arbitrary File Read Vulnerability in SAP EAP Enterprise Adaptation Management Platform

EAP Enterprise Adaptive Management Platform is an enterprise management software designed by Sap for the complexity and diversity of real estate enterprise management in China. EAP Enterprise Adaptation Management Platform has an arbitrary file reading vulnerability, which can be exploited by...

Microsoft Lync Server Information Leakage Vulnerability

Microsoft Lync Server formerly known as Microsoft Office Communicator is a set of enterprise integrated communication platform from Microsoft. The platform is able to integrate different communication methods into one platform across PCs, Web, cell phones, and other mobile devices. An information...

Node.js third-party modules: Path traversal in https://www.npmjs.com/package/http_server via symlink

I would like to report Path traversal in httpserver It allows an attacker to read arbitrary system files. Module module name: httpserver version: 1.0.12 npm page: https://www.npmjs.com/package/httpserver Module Description Copy description from npm page Module Stats Weekly downloads: 35...

Exploit for Path Traversal in Ivanti Connect_Secure

pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitr...

Code Execution, Arbitrary File Read Vulnerabilities in RGCMS

RuiGu information management system RGCMS is a set of open source building management system. RGCMS1.06 version of the existence of arbitrary file read, write vulnerability, attackers can use this vulnerability to obtain control of the web server...

IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 - Arbitrary File Read

!/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact...

IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 - Arbitrary File Read Exploit

!/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact...

IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read

IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read !/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it...

Arbitrary File Read Vulnerability in DLink DIR-878

DIR-878 adopts IEEE802.11ac WAVE 2 wireless technology, with MU-MIMO technology multi-person synchronous connectivity, dual-band wireless transmission/reception up to 1900Mbps, low-interference, transmission rate of up to 1300Mbps in the 5GHz band wireless network environment. DLink DIR-878 has a...

CVE-2019-3394

There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under /confluence/WEB-INF directory, which may contain configuration...