Arbitrary file editing vulnerability in niubicms v1.8

Cow CMS is a free version of the local portal PHP source code system. Includes: news, real estate, talent, automotive, local business station three-level domain name station, merchant business cards and other functions. niubicms v1.8 version of the existence of arbitrary file editing vulnerabilit...

Arbitrary File Editing Vulnerability in CoverCMS v1.1.7

Shanghai Raging Wolf Network Technology Co., Ltd. is committed to the development of mobile Internet and enterprise website, e-commerce website. CoverCMS v1.1.7 version exists arbitrary file editing vulnerability, due to the product of the file name to edit the file and to write the file content...

Trusted-Directory Bypass via Path Traversal

if you enable secrity .$trusteddir is an array of all directories that are considered trusted. Trusted directories are where you keep php scripts that are executed directly from the templates . the attackers can use ../ to bypass the dir ,if they can editing the templates, they read any file they...

Mail.ru: api.icq.com / возможность отредактировать текст любого пользователя или группы переслав его.

Нашёл лютую дырку дело в том что при пересылке сообщения пользователя группы текст стоит в параметре конечно же я пробовал его отредактировать и послать пакет но никак не выходило и тут я использовал один старый метод, обычно же идёт GET запрос его мы и меняем, но после идёт POST запрос который...

Shopify: SSRF in Exchange leads to ROOT access in all instances

The Exploit Chain - How to get root access on all Shopify instances 1 - Access Google Cloud Metadata - 1: Create a store partners.shopify.com - 2: Edit the template password.liquid and add the following content: html...

ucms v1.4.5 Arbitrary File Editing Vulnerability

UCMS is a simple open source content management system. ucms v1.4.5 version of the existence of arbitrary file editing vulnerability, the attacker can edit any script file, directly write a sentence Trojan horse, to obtain control of the web server...

[SECURITY] Fedora 28 Update: zsh-5.5-1.fc28

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the Korn shell, but includes many enhancements. Zsh supports command line editing, built-in spelling correction, programmable command completion, shell...

Space not freed up after force-canceling a task

When editing a layer or publishing an image, you see extra space consumed in the "Layering Service" Local Storage normally. You attempt to cancel the operation, but the task does not cancel. Eventually after 60 minutes the cancel operation gets to the Stalled state, allowing you to force-cancel t...

CVE-2016-9645

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

CVE-2016-9645

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

Design/Logic Flaw

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

DEBIAN-CVE-2016-9645

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

UBUNTU-CVE-2016-9645

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

CVE-2016-9645

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

CVE-2016-9645 Editing restriction bypass for git revert

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

CVE-2016-9645

The CVE-2016-9645 entry concerns ikiwiki and an editing restriction bypass flaw arising from an incomplete fix for CVE-2016-10026. Affected component: ikiwiki (versions around 3.20161219) when using git with git versions older than 2.8.0, where reverting a revision could bypass page edit restrict...

PT-2018-5113

Name of the Vulnerable Software and Affected Versions ikiwiki versions prior to 3.20161229 git versions prior to 2.8.0 Description The issue concerns an incomplete fix for ikiwiki, resulting in an editing restriction bypass for git revert. This occurs when using git versions older than 2.8.0...

CVE-2016-9645: Improper Access Control

The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229...

Error: "500 Internal Server" when Clicking on 'Edit' for a Device on XenMobile

When selecting a device under Manage r Devices and clicking on Edit. Customer is receiving the Error: 500 Server Internal Error exid:16C0...

Remote code execution

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 the fixed version for 4.13.0 through 5.4.7, 5.5.0 before 5.5.8 the fixed version for 5.5.x, 5.6.0 before 5.6.5 the fixed version for 5.6.x, 5.7.0 before 5.7.3 the fixed version for 5.7.x, and 5.8.0 before 5.8.2 the...