EUVD-2018-0312

Malware in sbrugna...

Network access to Pakistan’s top fed agency FBR sold on Russian forum

By Waqas FBR has acknowledged the data breach and called it out as cyber-terrorism on Pakistan's independence day. This is a post from HackRead.com Read the original post: Network access to Pakistans top fed agency FBR sold on Russian forum...

fbr-partner.de Cross Site Scripting vulnerability OBB-1340614

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Directory Traversal in fbr-client

Affected versions of fbr-client resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

GHSA-QMHF-QG6F-PC4V Directory Traversal in fbr-client

Affected versions of fbr-client resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

Directory Traversal

fbr-client is vulnerable to directory traversal attacks. The attacks are possible by requesting a URL such as /..%2f..%2fetc/passwd to get sensitive information...

CVE-2017-16217

fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16217

CVE-2017-16217 affects the fbr-client, where a directory traversal vulnerability allows an attacker to access files on the filesystem by placing ../ in the URL. The issue is triggered when files are sent through sockets via socket.io and WebRTC. Public sources in the connected documents describe ...

CVE-2017-16217

fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16217: Improper Limitation of a Pathname to a Restricted Directory

fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory Traversal

Overview Affected versions of fbr-client resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...