Google TensorFlow 路径遍历漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an arbitrary file overwrite vulnerability, which originates from an issue caused when tf.keras.utils.getfile is used with extract=True, and can be exploited by an...

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12900)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'getfile' function of the ajaxcalls.php file in version...

CVE-2018-15535: Improper Limitation of a Pathname to a Restricted Directory

/filemanager/ajaxcalls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize getfile sequences such as ".." that can resolve to a location that is outside of that directory,...

AlegroCart Arbitrary Code Execution Vulnerability

AlegroCart is an open source online business solution from the Canadian ALEGROCART team. AlegroCart version 1.2.8 has a remote file inclusion vulnerability in the 'getfile' function of the upload/admin2/controller/reportlogs.php file, which stems from the program failing to detect the 'filepath'...

CVE-2015-9227: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in the getfile function in upload/admin2/controller/reportlogs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the filepath parameter to upload/admin2...

AlienVault OSSIM 'av-centerd' get_file() Information Disclosure

The remote host is running a version of AlienVault Open Source Security Information Management OSSIM that is affected by an information disclosure vulnerability in the 'av-centerd' SOAP service due to a failure to sanitize user input to the 'getfile' method. A remote, unauthenticated attacker can...

CVE-2014-4153

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted getfile request...

CVE-2014-4153

CVE-2014-4153 affects AlienVault OSSIM

AlienVault OSSIM av-centerd Util.pm get_file Information Disclosure Vulnerability

This vulnerability allows remote attackers to obtain sensitive information on vulnerable installations of AlienVault OSSIM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the av-centerd SOAP service. The issue lies within the improper handling of a...

HP Data Protector Backup Client Service GET_FILE Buffer Overflow (CVE-2011-1729)

A remote code execution vulnerability has been reported in HP Data Protector. The vulnerability is due to insufficient boundary checks of user-supplied parameters in the vulnerable function while handling GETFILE messages. A remote attacker could exploit this vulnerability by sending a malformed...

HP Data Protector Backup Client Service GET_FILE Directory Traversal (CVE-2011-1736)

A directory traversal vulnerability has been reported in HP Data Protector's backup client service. HP Data Protector is an automatic data backup and recovery software solution, for applications in both physical and virtual environments. The vulnerability is due to insufficient sanitization in th...

HP OpenView Storage Data Protector Backup Client Service GET_FILE Message Processing Overflow

Added: 05/09/2011 CVE: CVE-2011-1729 BID: 47638 OSVDB: 72188 Background HP OpenView Storage Data Protector is a backup solution for enterprise and distributed environments. Problem A remote code execution vulnerability exists in HP Data Protector Backup Client Service due to a buffer overflow in...

CVE-2011-1729

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GETFILE message...

CVE-2011-1729

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GETFILE message...

CVE-2011-1736: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GETFILE message...

CVE-2011-1729: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GETFILE message...

HP Data Protector Backup Client Service GET_FILE Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on T...

MMS Gallery PHP 1.0 (id) Remote File Disclosure Vulnerability

No description provided by source. MMS Gallery in PHP v1.0 id Remote File Disclosure Vulnerability D.Script : http://www.mms2web.com/mmsgalleryphp.zip POC : /mmstemplate/getimage.php?id=../../../../../../../../etc/passwd /mmstemplate/getfile.php?id=../../../../../../../../etc/passwd...