Improper Input Validation in Firefly III

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

GHSA-JJCX-999M-35HC Improper Input Validation in Firefly III

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

Windows File Enumeration Intel Gathering Tool 2.2

from subprocess import Popen, PIPE import sys,argparse,re MIT License Copyright c 2020 John Page aka hyp3rlinx Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

Information disclosure

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3798

CVE-2020-3798 affects Adobe Digital Editions, specifically version 4.5.11.187212 and earlier on Windows, which is vulnerable to a file enumeration (host or local network) flaw that could lead to information disclosure. The root cause is information-disclosure via file enumeration within the appli...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

Sophisticated Info-Stealer Targets Air-Gapped Devices via USB

The Cycldek APT group has added a previously unknown malware dubbed USBCulprit to its arsenal, aimed at reaching air-gapped devices. Cycldek a.k.a. Goblin Panda, APT 27 and Conimes has been targeting governments in Southeast Asia since 2013, according to analysis from Kaspersky, and has been...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: User Email Verification Bypass OAuth Flow Missing Email Verification Checks Notification Email Verification Bypass Undisclosed Vulnerability on a Third-Party Rendering Engine Group Sign-Up Restriction Bypass Mirror Project Owner Impersonation Missing Permission Check on Fork...

Tiny File Manager path traversal vulnerability (CNVD-2020-27486)

Tiny File Manager is a web-based open source file manager. Tiny File Manager path traversal vulnerability. An attacker can use this vulnerability to enumerate directories and files on the file system...

Adobe Digital Editions File Enumeration Vulnerability

Adobe Digital Editions DE is a set of e-book reading management software from the American company Audobee Adobe. The software supports open, read and manage PDF, XML, Flash and other formats. Adobe Digital Editions has a security vulnerability. An attacker can exploit the vulnerability to obtain...

Adobe Digital Editions Information Disclosure Vulnerability (APSB20-23) - Windows

Adobe Digital Edition is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

DNN Information Disclosure Vulnerability

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. DNN formerly DotNetNuke 9.5 version of the embedded...

CVE-2020-11585

CVE-2020-11585 affects DNN (DotNetNuke) 9.5 in the built-in Activity-Feed/Messaging/Userid/Message Center module. A registered user can enumerate arbitrary files in the Admin File Manager (excluding secure folders) by sending themselves a message with a file attached, utilizing an arbitrary small...

CVE-2020-9323

Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx...

CVE-2020-9323

Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx...

Design/Logic Flaw

Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx...

CVE-2020-9323

CVE-2020-9323 affects Aquaforest TIFF Server 4.0 and allows unauthenticated enumeration of files and directories via the tiffserver/tssp.aspx endpoint. The root cause is an information-disclosure vulnerability in a networked TIFF server, enabling an attacker with network access to enumerate poten...