gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...

Amazon S3 Torrent Download - Detect

Amazon S3 Torrent download was detected, which can allow a malicious user to download files. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon S3 Torrent download was detected, which can allow a malicious user to download files.""" from kittysploit import from lib.protocols.http.httpclient impo...

Devika v1 - Path Traversal Detection

The snapshotpath parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshotpath parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized...

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

ThinkAdmin 6 - Local File Inclusion Detection

ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkAdmin version 6 is affected by a local file inclusion...

Joomla! Component LoginBox - Local File Inclusion Detection

A directory traversal vulnerability in the LoginBox Pro comloginbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the LoginBox Pro...

SolarView Compact 6.00 - Local File Inclusion Detection

SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """SolarView Compact 6.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Microsoft FrontPage Configuration - Exposure Detection

Microsoft FrontPage Server Extensions configuration files were accessible, exposing version details, directory paths, and other configurations. This was a common misconfiguration on old 2000s IIS servers with FrontPage Server Extensions installed. !/usr/bin/env python3 -- coding: utf-8 --...

Axigen Mail Server Filename Directory Traversal Detection

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in an edi...

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal Detection

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """There is a Directory traversal...

WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion Detection

WordPress Duplicator 1.3.24 & 1.3.26 are vulnerable to local file inclusion vulnerabilities that could allow attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal Detection

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

Commvault CommCell - Local File Inclusion Detection

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. !/usr/bin/env python3 -- coding: utf-8 --...

LionWiki <3.2.12 - Local File Inclusion Detection

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """LionWiki before 3.""" import re from kittysploit import from...

Processwire CMS <2.7.1 - Local File Inclusion Detection

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Processwire CMS prior to 2.""" import re from kittysploit import from...

Eclipse Mojarra - Local File Read Detection

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal in Eclipse Mojarra before 2.""" from kittysploit import from lib.protocols.http.httpclient import...

Draytek VigorConnect 6.0-B3 - Local File Inclusion Detection

Draytek VigorConnect 1.6.0-B3 is susceptible to local file inclusion in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. !/usr/bin/env...

Joomla! ChronoForums 2.0.11 - Local File Inclusion Detection

Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials. !/usr/bin/env python3 -- coding: utf-8 --...

SolarWinds Serv-U 15.3 - Directory Traversal Detection

SolarWinds Serv-U 15.3 is susceptible to local file inclusion, which may allow an attacker access to installation and server files and also make it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site...

IND780 - Local File Inclusion Detection

IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10' is vulnerable to unauthenticated local file inclusion. It is possible to traverse the folders of the affected host by providing a relative path to the...