zzzcms v1.5.3.0129 version exists arbitrary file renaming vulnerability

zzcms is a free website builder developed in asp language. zzzcms v1.5.3.0129 version of the existence of arbitrary file renaming vulnerability. The vulnerability stems from the fact that the file name and path of the file to be renamed are not filtered, which can be exploited by an attacker to...

BrainDamage - A fully featured backdoor that uses Telegram as a C&C server

A python based backdoor which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul [email protected] -- Github: https://github.com/mehulj94 -- Twitter: https://twitter.com/wayfarermj -- For windows only | | | | | | | | | / / | | | | | '/ / |...

PT-2016-7344

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations versions prior to 6.4.0 Description The issue allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

PT-2015-2906

Name of the Vulnerable Software and Affected Versions 1С-Битрикс versions prior to bitrix.xscan module 1.0.4 Description The issue exists due to insufficient restriction of the directory path name in the admin/bitrix.xscan worker.php module of the 1С-Битрикс web project management system...

CVE-2015-8357: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or cause a denial of service, via a .. dot dot in the file parameter to admin/bitrix.xscanworker.php...

NetCharts Server Multiple Vulnerabilities

NetCharts Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-3834

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to 1 access the contacts of other users via the address book or 2 rename files via unspecified vectors...

CVE-2014-3834

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to 1 access the contacts of other users via the address book or 2 rename files via unspecified vectors...

CVE-2014-3834: Undefined Security Weakness

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to 1 access the contacts of other users via the address book or 2 rename files via unspecified vectors...

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh New Features in this version 0x01A Bind Shell 0x01B Back Connect 0x01C Fixed Some Coding errors! 0x01D Rename Files 0x01E Encoded Title Download or Read More...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities

TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities...

Untrusted Application or Applet May Move or Copy Arbitrary Files

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-0668: Undefined Security Weakness

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...