CVE-2018-19748

CVE-2018-19748 – affected software : SDCMS 1.6, vulnerability in app/plug/attachment/controller/admincontroller.php. Issue : directory traversal via a vulnerable request to /?m=plug&c=admin&a=index&p=attachment&root=, where the root parameter must be base64 encoded. Impact : reading arbitrary fil...

Arbitrary File Read Vulnerability in NetEase Cloud RDS Service

NetEase Cloud RDS is a stable, reliable and elastic scalable online relational database service. An arbitrary file read vulnerability exists in the NetEase Cloud RDS service, which can be exploited by an attacker to read arbitrary files...

Baidu Cloud RDS service suffers from arbitrary file read vulnerability

Baidu Cloud RDS service is a specialized high-performance and highly reliable cloud database service provided by Baidu. An arbitrary file read vulnerability exists in Baidu Cloud RDS service, which can be exploited by an attacker to read arbitrary files...

Arbitrary File Read Vulnerability in AWS RDS Service

Amazon RDS Service is an RDS service from Amazon that enables you to easily set up, operate, and scale relational databases in the cloud. An arbitrary file read vulnerability exists in AWS RDS Service, which can be exploited by an attacker to read arbitrary files...

Arbitrary File Read Vulnerability in Specific Configurations of phpMyAdmin

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. An arbitrary file read vulnerability exists in a...

Huawei Cloud RDS service suffers from arbitrary file read vulnerability

Huawei Cloud RDS Service is a specialized high-performance and highly reliable cloud database service provided by Huawei Technologies Co. An arbitrary file read vulnerability exists in Huawei Cloud RDS Service, which can be exploited by an attacker to read arbitrary files...

Arbitrary File Read Vulnerability in Kingsoft Cloud RDS Data Migration Service

Kingsoft Cloud RDS is an out-of-the-box, stable, reliable and elastic scalable online database service. Kingsoft Cloud RDS data migration service suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files...

The vulnerability of the Winbox component in the RouterOS operating system of MikroTik allows a hacker to bypass the authentication process.

The vulnerability of the Winbox component in the RouterOS operating system of MikroTik is caused by errors in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to read arbitrary files and bypass the authentication process...

Advantech WebAccess WADashboard API 'readFile' Method Path Traversal Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides remote control and management of automation devices.WADashboard API is one of the dashboard API components. A...

PhpTpoint Mailing Server Using File Handling Arbitrary File Read Vulnerability

PhpTpoint Mailing Server Using File Handling is a file system based implementation of the mail server . An arbitrary file read vulnerability exists in PhpTpoint Mailing Server Using File Handling version 1.0, which can be exploited by an attacker to bypass the login page and read sensitive files...

glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message

A buffer overflow on the heap was found in gfgetspecreq RPC request. A remote, authenticated attacker could use this flaw to cause denial of service and read arbitrary files on glusterfs server node...

CVE-2018-18713

The function downsqlaction in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=downsql&name=../ URI...

CVE-2018-18703

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserverfilesystem/home.php...

CVE-2018-18703

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserverfilesystem/home.php...

Directory traversal

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserverfilesystem/home.php...

ACME mini_httpd Arbitrary File Read Vulnerability

ACME minihttpd is a small HTTP server from ACME Labs. A security vulnerability exists in ACME minihttpd versions prior to 1.30. A remote attacker can exploit this vulnerability to read arbitrary files...

CVE-2018-18703

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserverfilesystem/home.php...

CVE-2018-18703

The issue pertains to CVE-2018-18703 affecting PhpTpoint Mailing Server Using File Handling 1.0. Multiple Arbitrary File Read vulnerabilities allow an attacker to read sensitive files on the host via directory traversal, including vectors that bypass the login page (e.g., Mailserver_filesystem/ho...

PHPTPoint Mailing Server Using File Handling 1.0 Arbitrary File Read

Exploit Title: phptpoint Mailing Server Using File Handling 1.0 - Arbitrary File Read Date: 2018-10-25 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: https://www.phptpoint.com/projects/ignou-mca-projects/ Version: 1.0...

Ltd. cloud collection of any content plug-ins exist in any file read vulnerability

The Cloud Capture Any Content Plugin by Heyuan Zhongda Culture Media Co. is a free collection plugin. There is an arbitrary file reading vulnerability in the Heyuan Zhongda Culture Media Limited Cloud Capture Any Content Plugin. Attacks can use this vulnerability to obtain sensitive information o...