4596 matches found
CVE-2017-1000028
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request...
Directory traversal
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request...
CVE-2017-1000028: Improper Limitation of a Pathname to a Restricted Directory
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request...
WDTV Live SMP 2.03.20 - Remote Password Reset Exploit
Exploit for hardware platform in category web applications WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live...
CVE-2017-1000028
Removed by vendor...
CVE-2017-8443: Use of GET Request Method With Sensitive Query Strings
In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...
Directory Traversal
web-debug is vulnerable to path traversal attacks. An attacker can access any files in the host machine by sending a HTTP GET request with /../ in it to obtain sensitive files such as /../../etc/passwd...
A vulnerability in the web console of the Antivirus Casper 8.0 anti-virus software allows for the transfer of JavaScript code executed by the client browser.
The vulnerability of the Antivirus Kaspersky 8.0 web console for Linux File Servers relates to the execution of scripts across sites. Exploiting this vulnerability allows a malicious actor to inject JavaScript code through a specially crafted GET request, with the JavaScript code specified in the...
Easy File Sharing Web Server 7.2 - GET 'PassWD' Remote Buffer Overflow (SEH)
!/usr/bin/python Exploit Title: Easy File Sharing Web Server 7.2 - GET HTTP Request PassWD Buffer Overflow SEH Date: 19 June 2017 Exploit Author: clubjk Author Contact: [email protected] Vendor Homepage: http://www.sharing-file.com Software Link:...
Information disclosure
IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667...
CVE-2017-1193
IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2017-1193, enabling a user to obtain sensitive information through an HTTP GET request due to improper access controls. The IBM Security Bulletin for CVE-2017-1193 (and related CVE-2017-1302) lists 5.2.6/5.2.x as affected and pro...
Authentication flaw
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
CVE-2017-9774: Improper Control of Generation of Code
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
PT-2017-19178
Name of the Vulnerable Software and Affected Versions Horde Image versions prior to 2.5.0 Description A Remote Code Execution issue was discovered, which can be exploited via a crafted GET request. This issue requires authentication to be exploited. Recommendations For versions prior to 2.5.0,...
D-Link DIR-605L Denial of Service Vulnerability
D-Link DIR-605L is a cloud router product from AUO D-Link. A denial of service vulnerability exists in the D-Link DIR-605L using firmware versions prior to 2.08UIBetaB01.bin. An attacker can exploit the vulnerability by sending a specially crafted GET request to cause the device to reboot...