10479 matches found
OpenRefine Directory Traversal Vulnerability
OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. A directory traversal vulnerability exists in OpenRefine prior to 3.5. An attacker can exploit this vulnerability to achieve directory traversal via the relative pathname of a ZIP...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
Debian: Security Advisory (DLA-1600-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-19562
An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background Program Upgrade Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive...
Code injection
An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background Program Upgrade Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive...
CVE-2018-19562
An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background Program Upgrade Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive...
CVE-2018-19562
PHPok 4.9.015 is affected. The vulnerability exists in the admin path admin.php?c=update&f=unzip, where a ZIP delivered through the Login Background > Program Upgrade > Compressed Packet Upgrade can contain a .php file, enabling remote code execution. Publicly described by multiple sources ...
[SECURITY] Fedora 28 Update: libarchive-3.3.3-1.fc28
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Code injection
In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&url=...
CVE-2018-19404
In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&url=...
WordPress CherryFramework Themes 3.1.4 Backup File Download
Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download Google Dork: inurl:/wp-content/themes/CherryFramework Date: 2018-11-17 Exploit Author: b1p0l4r Vendor Homepage: http://www.cherryframework.com/ Software Link: http://www.cherryframework.com/ Version: 3.x.x 3.1.4 Tested o...
YXcms Arbitrary PHP Code Execution Vulnerability
YXcms is a PHP and MySQL based enterprise building content management system CMS. A security vulnerability exists in the protected/apps/appmanage/controller/indexController.php file in YXcms version 1.4.7. A remote attacker can exploit this vulnerability to execute arbitrary PHP code via a ZIP...
WordPress CherryFramework Themes 3.1.4 - Backup File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download Google Dork: inurl:/wp-content/themes/CherryFramework Exploit Author: b1p0l4r Vendor Homepage: http://www.cherryframework.com/ Software Link:...
WordPress CherryFramework Themes 3.1.4 - Backup File Download
WordPress CherryFramework Themes 3.1.4 - Backup File Download Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download Google Dork: inurl:/wp-content/themes/CherryFramework Date: 2018-11-17 Exploit Author: b1p0l4r Vendor Homepage: http://www.cherryframework.com/ Software Link:...
WordPress Theme CherryFramework 3.1.4 - Backup File Download
Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download Google Dork: inurl:/wp-content/themes/CherryFramework Date: 2018-11-17 Exploit Author: b1p0l4r Vendor Homepage: http://www.cherryframework.com/ Software Link: http://www.cherryframework.com/ Version: 3.x.x 3.1.4 Tested o...
Faraday v3.3 - Collaborative Penetration Test and Vulnerability Management Platform
Here’s the main new features and improvements in Faraday v3.3: Workspace archive You are now able to make the whole workspace read only and archive it for future use. This allows to clear the clutter from all your ongoing projects while giving you the opportunity to continue with your work later ...