EUVD-2018-0231

Malware in sbrugna...

Directory Traversal in sencisho

Affected versions of sencisho are vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo Recommendation No patch is available for this vulnerability. ...

Sencisho Directory Traversal Vulnerability

Sencisho is an http server for local development. A directory traversal vulnerability exists in Sencisho. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2017-16092

Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

Directory traversal

Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16092

Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16092

Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....

Directory Traversal

Overview Affected versions of sencisho are vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Example request: GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo Recommendation No patch is available for this...

Directory Traversal

sencisho is vulnerable to directory traversal attacks. A malicious user can prepend /..%2f..%2f in a directory string to disclose the files in a target directory...