CVE-2018-11222

Local File Inclusion LFI in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandoraconsole/ajax.php ajax endpoint...

CVE-2018-11222

Pandora FMS

PT-2018-10406

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions prior to 7.23 Description The issue allows an attacker to perform a Local File Inclusion LFI attack. This is achieved by calling any php file via the "/pandora console/ajax.php" API endpoint. Recommendations For...

CVE-2013-3018

The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.2 and 7.2.0 through 7.2.1.4 allows remote attackers to obtain sensitive configuration information via a direct request, as demonstrated by happyaxis.jsp. IBM X-Force ID: 84354. Recent assessment...

Rockstar Games: LFI and SSRF via XXE in emblem editor

This summary is provided by the researcher who submitted this report, @alexbirsan . About one year after I started messing with the emblem editor, I finally found a full SSRF and LFI. I was able to extract text files from the server and HTTP responses by rendering them on my crew emblem. For thos...

Mail.ru: LFI in beta.mail.ru

Local file read via file:// URI in report's image in beta.mail.ru. beta.mail.ru is not currently covered by bug bounty program. Чтение произвольных файлов сервера путем недостаточной проверки прикрепленных изображений...

WordPress Site Editor plugin <=1.1.1 - Local File Inclusion (LFI) vulnerability

Local File Inclusion LFI vulnerability found by Nicolas Buzy-Debat in WordPress Site Editor plugin versions =1.1.1. Solution 19.03.18 - we were unable to find a patched version of the plugin...

Site Editor <= 1.1.1 - Local File Inclusion (LFI)

The site-editor WordPress plugin was affected by a Local File Inclusion LFI security vulnerability...

Ananta Gazelle 1.0 Local File Inclusion

============================================================================================================================ | Title : Ananta Gazelle 1.0 LFI Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 Fr V.Pro | | Vendor :...

Vanilla 2.0.18.8 Local File Inclusion

============================================================================ | Title : Vanilla Version 2.0.18.8 LFI Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : 2.0.18.8 | | Vendor :...

CVE-2018-0013

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

Exploit for Path Traversal in Hoytech Antiweb

ICS/OT AntiWeb: Testing Suite Introducción Una vulnerabil...

vBulletin LFI

Local file include vulnerability in vBulletin routestring parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

V3n0M-Scanner - Popular Pentesting scanner for SQLi/XSS/LFI/RFI and other Vulns

V3n0M is a free and open source scanner. Evolved from baltazar's scanner, it has adapted several new features that improve fuctionality and usability. It is mostly experimental software. This program is for finding and executing various vulnerabilities. It scavenges the web using dorks and...

Valve: LFI in pChart php library

Local File Inclusion LFI vulnerability in the pChart php library...

Popular Pentesting Scanner: v3n0m

v3n0m is a free and open source scanner. Evolved from baltazar’s scanner, it has adapted several new features that improve functionality and usability. It is mostly experimental software. This program is for finding and executing various vulnerabilities. It scavenges the web using dorks and...

WordPress PluginOps Page Builder plugin <= 1.4.3 - Authenticated Local File Inclusion (LFI) Vulnerability

Authenticated Local File Inclusion LFI Vulnerability exists in 1.4.3 version in the function pbshortcodesamplenav. It allows an attacker to include local files by using menuclass shortcode argument in pbsamlplenav shortcode. Solution Update the plugin...

BMC Remedy LFI / RFI / XSS / Code Execution Vulnerabilities

BMC Remedy suffers from log hijacking, code execution, cross site scripting, local/remote file inclusion, and various other vulnerabilities. Document Title ============== Multiple vulnerabilities in BMC Remedy Reported By =========== Simon Rawet from Outpost24 Kristian Varnai from Outpost24 Vendo...

Slack: Unauthenticated LFI revealing log information

@juji found a bug which allowed the disclosure of local files on certain servers - this included PHP files and logs. We performed a thorough investigation to ensure that this issue was not exploited, and as a precaution revoked tokens which were inadvertently logged. Thanks @juji! Write-up...

WiseGiga NAS CSRF / LFI / Command Execution

Source: https://blogs.securiteam.com/index.php/archives/3402 Vulnerabilities summary The following advisory describes five 5 vulnerabilities and default accounts / passwords found in WiseGiga NAS devices. WiseGiga is a Korean company selling NAS products. The vulnerabilities found in WiseGiga NAS...