python-django: directory traversal with "ssi" template tag

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWEDINCLUDEROOTS setting followed by a .. dot dot in a ssi template tag...

DEBIAN-CVE-2013-4315

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWEDINCLUDEROOTS setting followed by a .. dot dot in a ssi template tag...

PT-2012-4669 · Cyberoam · Cyberoam Utm

Name of the Vulnerable Software and Affected Versions: Cyberoam UTM appliances affected versions not specified Description: The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations. This...

On the IIS registry full version leak the user's path and FTP username vulnerability-vulnerability warning-the black bar safety net

This hole by the HE AND Ah di Ming find! And do the test! The title is quite long! Haha This vulnerability seems tasteless, but there are also powerful usefulness. But know how to use him, completely by myself, I just give a little idea. Into the theme! Important the registry:...

Jose Nazario on Politically Motivated DDoS Attacks (Part 1)

Jose Nazario of Arbor Networks gives a talk at the Kaspersky Lab Security Analyst Summit in Cyprus about the hype around cyberwar and the roots of politically motivated DDoS attacks and what they mean in today’s climate...

CVE-2010-0004

ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view...

CVE-2006-2438

CVE-2006-2438 is a directory traversal in Resin’s viewfile servlet (resin-doc) affecting Resin 3.0.17 and 3.0.18. An unauthenticated remote attacker can read arbitrary files under other web roots via the contextpath parameter, with potential path disclosure when the parameter is invalid. The issu...