CVE-2016-4806

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

CVE-2016-4806

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

CVE-2016-4806

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

UBUNTU-CVE-2016-4806

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

CVE-2016-4806

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

CVE-2016-4806: Exposure of Sensitive Information to an Unauthorized Actor

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...

PT-2017-8532

Name of the Vulnerable Software and Affected Versions Web2py versions 2.14.5 and below Description The issue allows a malicious user to read or access sensitive files on the web server through a Local File Inclusion vulnerability. Recommendations For Web2py versions 2.14.5 and below, update to a...

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334

CVE-2016-5334 affects VMware Identity Manager 2.x < 2.7.1 and vRealize Automation 7.x

Horos Web Portal Directory Traversal Vulnerability

Horos is an open source free DICOM medical image viewer. A directory traversal vulnerability exists in the Horos 2.1.0 version of the portal, which can be exploited by an attacker to traverse arbitrary files to obtain sensitive information...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to...

DLink ADSL Router DSL-2750E SEA_1.07 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.07 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

Security feature bypass

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

Removed by vendor...

PT-2017-8492 · Red Hat +1 · Subscription-Manager +2

Name of the Vulnerable Software and Affected Versions: Subscription Manager versions prior to 1.17.7-1 Description: The issue concerns weak permissions set for cache directories in the Subscription Manager package, allowing local users to access sensitive information by reading files in these...

gitlab -- Directory traversal via "import/export" feature

GitLab reports: The import/export feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. This included sensitive files such as those that...

Wordpress wptf-image-gallery information disclosure vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. wptf-image-gallery is one of the gallery plugin for full-screen display. An information disclosure vulnerability exists in Wordpress wptf-image-gallery plugin v1.03, which can be exploited ...

File Containment Vulnerability in Salient Smart DNS

RealEase Intelligent DNS Management System is a set of intelligent DNS, domain name management and wide-area load balancing solutions for Internet enterprises, medium and large websites and universities. A file inclusion vulnerability exists in the /index.php?-dautoprependfile%3d/etc/passwd/ and...