2896 matches found
CVE-2019-14424
A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...
CVE-2019-14424
The CVE-2019-14424 issue affects the CUx-Daemon 1.11a component of eQ-3 Homematic CCU-Firmware, specifically versions 2.35.16 through 2.45.6. It is a Local File Inclusion (LFI) vulnerability that allows remote authenticated attackers to read sensitive files via a simple HTTP request. The connecte...
CVE-2019-14424: Improper Limitation of a Pathname to a Restricted Directory
A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...
FDsploit - File Inclusion And Directory Traversal Fuzzing, Enumeration & Exploitation Tool
A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. FDsploit menu: $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c -v --params...
CVE-2019-16679
Gila CMS (pre-1.11.1) is vulnerable to an authenticated Local File Inclusion via admin/fm/?f=.. abuse (directory traversal). Root cause: improper sanitization of the f parameter allows traversal to access local files. Impact as described: Local File Inclusion with partial confidentiality impact; ...
Alkacon OpenCMS 10.5.x Local File Inclusion
Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5 / 10.5.4 CVE :...
Alkacon OpenCMS 10.5.x - Local File inclusion Vulnerability
Exploit for multiple platform in category web applications Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5...
Alkacon OpenCMS 10.5.x - Local File inclusion
Alkacon OpenCMS 10.5.x - Local File inclusion Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version:...
Local File Inclusion (LFI)
opencms-core is vulnerable to local file inclusion LFI vulnerability. It is possible because server resources such as: clearhistory.jsp, convertxml.jsp, groupnew.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp are accessible by the attacker...
WordPress Photo Gallery Plugin < 1.5.25 LFI Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112629";...
WordPress Adaptive Images for WordPress plugin <= 0.6.66 - Local File Inclusion (LFI) vulnerability
Local File Inclusion LFI vulnerability found by Mark Gruffer in WordPress Adaptive Images for WordPress plugin versions = 0.6.66. Solution Update the WordPress Adaptive Images for WordPress plugin to the latest available version at least 0.6.67...
See how I found Bol. com website the XXE vulnerability and successfully exploited-vulnerability warning-the black bar safety net
In a previous report, we learned a lot about in the visitor's browser to execute code knowledge; reflection typeXSSand a storage typeXSS. In addition, we also quickly see the error configuration of the server settings and Open Redirect open-type redirect to. Today, we will explore how from the...
Karenderia Multiple Restaurant System 5.3 - Local File Inclusion
Karenderia Multiple Restaurant System 5.3 - Local File Inclusion =========================================================================================== Exploit Title: Karenderia CMS 5.1 - LFI Vuln. Dork: N/A Date: 04-07-2019 Exploit Author: Mehmet EMIROGLU Software Link:...
WordPress Revamp CRM for WooCommerce plugin <= 1.0.3 - Local File Inclusion (LFI) vulnerability
Local File Inclusion LFI vulnerability found in WordPress Revamp CRM for WooCommerce plugin versions = 1.0.3. Solution Update the WordPress Revamp CRM for WooCommerce plugin to the latest available version at least 1.0.4...
CVE-2019-3737
Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...
CVE-2019-3737
Dell EMC Avamar ADMe Web Interface versions 1.0.50 and 1.0.51 are affected by a Local File Inclusion (LFI) vulnerability. The issue allows a malicious user to download arbitrary files from the affected system via a specially crafted request to the Web Interface. The connected CNVD entry confirms ...
CVE-2019-3737 Dell EMC Avamar Security Update for ADMe Web UI Vulnerability
Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...
Sina Extension For Elementor <= 2.2.0 - LFI
The Sina Extension for Elementor WordPress plugin was affected by a LFI security vulnerability...
CVE-2019-3737: Improper Limitation of a Pathname to a Restricted Directory
Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...