2648 matches found
CVE-2018-1000645
LibreHealthIO lh-ehr version REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import...
Black Hat 2018: Cortana Flaw Allowed Takeover of Locked Windows 10 Device
LAS VEGAS – Researchers sounded the security alarm here at Black Hat over issues tied to voice control – specifically with the Windows Cortana service. On Wednesday they outlined a flaw patched in June by Microsoft dubbed “Open Sesame” that allowed an adversary to bypass a Windows 10 lock screen...
Responsive File Manager 9.13.1 File Disclosure
Responsive Filemanager v 9.13.1 1 Author: Silton Santos ===== Table of Contents =================================== Overview Detailed description Timeline of disclosure Thanks & Acknowledgements References ===== Overview =================================== System affected : Responsive Filemanager...
CVE-2017-9000
ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An...
Arbitrary File Read Vulnerability in Metinfo 6.0.0 Backend
MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in the Metinfo version 6.0.0 backend. An attacker can exploit the vulnerability to read sensitive files on a website...
Arbitrary File Read Vulnerability in Metinfo Version 6.0.0
MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in Metinfo version 6.0.0. An attacker can exploit the vulnerability to read sensitive files on a website...
CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
OURPHP website builder V1.8.3 has an arbitrary file read vulnerability
OURPHP a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP building system V1.8.3 there are arbitrary file reading vulnerability, attackers can use the vulnerability to read sensitive system files...
H2 Database 1.4.197 - Information Disclosure Exploit
Exploit for linux platform in category web applications Exploit Title: H2 Database 1.4.197 - Information Disclosure Exploit Author: owodelta Vendor Homepage: www.h2database.com Software Link: http://www.h2database.com/html/download.html Version: all versions Tested on: Linux CVE : CVE-2018-14335...
H2 Database 1.4.197 Information Disclosure
Exploit Title: H2 Database 1.4.197 - Information Disclosure Date: 2018-07-16 Exploit Author: owodelta Vendor Homepage: www.h2database.com Software Link: http://www.h2database.com/html/download.html Version: all versions Tested on: Linux CVE : CVE-2018-14335 Description: Insecure handling of...
ZZZCMS website builder system suffers from overstepping access vulnerability
zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZZCMS website builder system exists overstepping the right to access the vulnerability, the attacker can use the vulnerability overstepping the right to access sensitive files...
Path Traversal
github.com/openshift/osin is vulnerable to path traversal. The vulnerability exists because it does not properly validate the redirect URL, allowing access to sensitive files...
Logic Flaw Vulnerability in Remote Access System of Chengdu Liantu Technology Co.
Liantu Education is a national high-tech enterprise. The company is mainly engaged in software platforms for education, scientific research and public culture systems, course services, dual-creation guidance for college students, database construction and other related products. There is a logic...
CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
UBUNTU-CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
CVE-2018-14335
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...
GHSA-RW6J-RHW7-Q94C Directory Traversal in sly07
Affected versions of sly07 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...