Lucene search
K

28 matches found

0day.today
0day.today
added 2023/03/20 12:0 a.m.315 views

Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure Vulnerability

Adobe Connect versions 11.4.5 and below as well as versions 12.1.5 and below suffer from a file disclosure vulnerability. Title: adobe connect - Local File Disclosure / Download security feature bypass vulnerability Author: h4shur CVE: CVE-2023-22232 Vendor Homepage: https://www.adobe.com Softwar...

5.3CVSS5.6AI score0.84273EPSS
Exploits4
NVD
NVD
added 2022/09/02 10:15 p.m.7 views

CVE-2022-36642

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...

9.8CVSS0.70723EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/09/02 10:15 p.m.0 views

CVE-2022-36642

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...

9.8CVSS7.3AI score0.70723EPSS
Exploits1References7
Cvelist
Cvelist
added 2022/09/02 9:23 p.m.16 views

CVE-2022-36642

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...

9.2AI score0.70723EPSS
Exploits1References5
CVE
CVE
added 2022/09/02 9:23 p.m.75 views

CVE-2022-36642

Telos Alliance Omnia MPX Node is affected by CVE-2022-36642 via a local file inclusion path involving /appConfig/userDB.json. The Nuclei template for Omnia MPX 1.5.0+r1 documents LFI through logs/downloadMainLog, enabling an attacker to read userDB.json, retrieve cleartext credentials, and escala...

9.8CVSS8.9AI score0.70723EPSS
In wildExploits1References5Affected Software1
GithubExploit
GithubExploit
added 2021/10/07 12:30 p.m.263 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 f...

7.5CVSS9.4AI score0.94391EPSS
Exploits144
Prion
Prion
added 2017/09/20 2:29 p.m.9 views

Arbitrary file deletion

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

7.8CVSS7.3AI score0.2183EPSS
Exploits3References2
CVE
CVE
added 2017/09/20 2:0 p.m.54 views

CVE-2017-8770

CVE-2017-8770 affects the BE126 WIFI repeater (1.0). A crafted getpage parameter allows local file disclosure, enabling an attacker to read the device’s entire filesystem. Public details in connected records confirm a Local File Disclosure vulnerability with proofs of concept (e.g., LFI via getpa...

7.8CVSS7.3AI score0.2183EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2017/09/20 2:0 p.m.12 views

CVE-2017-8770

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

7.3AI score0.2183EPSS
Exploits3References2
Packet Storm
Packet Storm
added 2016/04/16 12:0 a.m.35 views

Webnet CMS 1.2 XSS / File Disclosure / SQL Injection

Exploit Title : Webnet CMS Multiple Vulnerabilities Exploit Author : Persian Hack Team Vendor Homepage : http://www.webnet.ir/ Homepage : http://www.persian-team.ir Date: 2016/04/15 Version : 1.2 POC: 1-LFDLocal File Dislocation Explain : ids Parameter encode base64 Path , you can use...

Exploits0
Packet Storm
Packet Storm
added 2015/07/14 12:0 a.m.30 views

Joomla Docman Path Disclosure / Local File Inclusion

Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 13/07/2015 Vendor Homepage:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2015/07/13 12:0 a.m.463 views

phpVibe - Arbitrary File Disclosure

phpVibe - Arbitrary File Disclosure In The Name Of ALLAH Exploit Title: phpVibe ALL versions LFD vulnerability Google Dork: "powered by phpvibe" Date: 2015/07/13 july 13th Exploit Author: ali ahmady -- Iranian Security Researcher snip3rirathotmail.com Vendor Homepage: http://www.phpvibe.com/...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2015/07/13 12:0 a.m.555 views

phpVibe - Arbitrary File Disclosure

In The Name Of ALLAH Exploit Title: phpVibe ALL versions LFD vulnerability Google Dork: "powered by phpvibe" Date: 2015/07/13 july 13th Exploit Author: ali ahmady -- Iranian Security Researcher snip3rirathotmail.com Vendor Homepage: http://www.phpvibe.com/ Software Link: http://get.phpvibe.com/...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2015/06/13 12:0 a.m.28 views

WordPress NativeChurch Theme 1.0 / 1.5 Arbitrary File Download

Exploit Title: Wordpress Theme NativeChurch - Arbitrary File Download Google Dork: inurl:"/wp-content/themes/NativeChurch/" Date: 13/6/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://support.imithemes.com/forums/forum/html-templates/native-church/ Software Link: N/A Version: 1.0-1.5...

7AI score
Exploits0
0day.today
0day.today
added 2015/02/16 12:0 a.m.30 views

Wordpress Justified Image Grid 2.0.1 LFD / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Justified Image Grid 2.0.1 LFD + XSS Exploit Author: NULLpOint7r Contact me: email protected Home: http://www.sec4ever.com/home/ Dork: inurl:/wp-content/plugins/justified-image-grid/ Date: 2015-02-16 Version:...

7.1AI score
Exploits0
0day.today
0day.today
added 2014/08/10 12:0 a.m.32 views

Voipswitch 6 Local File Disclosure Vulnerability

Voipswitch versions 6 and below suffer fro a local file inclusion vulnerability. Voipswitch = 6 , LFD Exploit Author : 0x4148 Voipswitch’s Unified Communication enables providers to offer a hosted business communication solution. Enterprises, instead of maintaining costly on-premises PBXes, can n...

6.8AI score
Exploits0
Packet Storm
Packet Storm
added 2014/08/06 12:0 a.m.25 views

Voipswitch 6 Local File Disclosure

Voipswitch = 6 , LFD Exploit Author : 0x4148 Voipswitch’s Unified Communication enables providers to offer a hosted business communication solution. Enterprises, instead of maintaining costly on-premises PBXes, can now enroll to a service in the cloud – Unified Communication as a Service UCaaS...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.31 views

balitbang cms 3.3 - Multiple Vulnerabilities

No description provided by source. !===========================================================================! CMS Balitbang Edit File Vulnerability Author : Xr0b0t [email protected] Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date : 18 Mart, 2010 Tested on...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2014/06/11 12:0 a.m.33 views

WordPress AdminOnline Local File Disclosure

GGGGGGGGGGGGG HHHHHHHHH HHHHHHHHH BBBBBBBBBBBBBBBBB GGG::::::::::::G H:::::::H H:::::::H B::::::::::::::::B GG:::::::::::::::G H:::::::H H:::::::H B::::::BBBBBB:::::B G:::::GGGGGGGG::::G HH::::::H H::::::HH BB:::::B B:::::B G:::::G GGGGGG H:::::H H:::::H B::::B B:::::B G:::::G H:::::H H:::::H...

7AI score
Exploits0
0day.today
0day.today
added 2014/01/02 12:0 a.m.4275 views

WeBid Local File Discolure vulnerability

+Description: Open source php/mysql fully featured auction script. Perfect for those who want to start their own auction site. +Exploit: Acal Suffers from an LFD vulnerability: Usage Info 127.0.0.1/PATH/WEBID/loader.php?js=LFD + Author: TUNISIAN CYBER + Exploit Title: WeBid all versions LFD...

7AI score
Exploits0
Rows per page
Query Builder