CVE-2021-21602

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

[cosmoshop again] sql injection + view all files as admin user

i am: l0om page: www.excluded.org product: cosmoshop 1 show all files as admin-user 2 sql injection Cosmoshop - Lse = V8.11.106 1 Show all files as an admin-user: /cgi-bin/admin/bestellvorgang/editmailtexte.cgi?file=../../../../../../../../../etc/passwd00...

WFBE.txt

// File Browsing Exploit // Tested on Windows 98 running Novell 3.2.0.0 // // By, t0mMaC // AIM: t0mMaC2600 // // // Disclaimer: // This is for experimental purposes only, using this venerability to gain access to nodes, hard drives, // directories, etc which your not suppose to be in is illegal...