CVE-2020-12112

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...

Design/Logic Flaw

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...

CVE-2020-12112

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...

CVE-2020-12112

BigBlueButton had an LFI/vulnerability in versions before 2.2.5 (CVE-2020-12112). Connected sources also describe a related issue (CVE-2020-12443) where case-insensitive handling of presFilename/presfilename enables directory traversal to bigbluebutton.properties, enabling reading of arbitrary fi...

PT-2020-13043 · Bigbluebutton · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.2.5 Description: The issue allows remote attackers to obtain sensitive files via Local File Inclusion. Recommendations: For versions prior to 2.2.5, update to version 2.2.5 or later to resolve the issue...

Rainy novel cms 1.2.2 background template management function there are directory traversal vulnerabilities

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A directory traversal vulnerability exists in the backend template management feature of Drizzle Novel cms 1.2.2. Attackers can use the vulnerability to view file...

Information Disclosure

kexec-tools is vulnerable to information disclosure. mkdumprd included unneeded sensitive files such as all files from the "/root/.ssh/" directory and the host's private SSH keys in the resulting initrd. This could lead to an information leak when initrd files were previously created with...

CVE-2020-10629

WebAccess/NMS versions prior to 3.0.2 does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files...

CVE-2020-10629

WebAccess/NMS versions prior to 3.0.2 does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files...

Vxscan

Based on the provided code and context, here is a summary of the analysis: Classification: It is an offensive tool for web application security testing. Primary Functionality: The tool, named Vxscan, is designed to perform a comprehensive scan of a web application, including: 1. Sensitive file...

Multiple Lexmark Product Path Traversal Vulnerabilities

The Lexmark CX410, among others, is a printer from Lexmark USA. A path traversal vulnerability exists in multiple Lexmark products. An attacker could exploit the vulnerability to access sensitive files...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

Vxscan

This is a Python script called Vxscan, which is a comprehensive scanning tool for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL injection, and other functions. The...

h2: Information Exposure due to insecure handling of permissions in the backup

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...

Selesta Visual Access Manager Information Disclosure Vulnerability

Selesta Visual Access Manager VAM is the Selesta Visual Access Manager. A security vulnerability exists in Selesta Visual Access Manager VAM versions 4.15.0 through 4.29, which stems from the /common/vameditXml.php page not checking the parameter used to specify the name of the file to read. An...

CVE-2019-6193

CVE-2019-6193 affects Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6. It is an information-disclosure vulnerability that could allow unauthenticated access to configuration files containing usernames, license keys, IP addresses, and encrypted password hashes. Lenovo advisories recom...

Magento path traversal vulnerability (CNVD-2020-04824)

Magento is an open source e-commerce framework. Magento has a path traversal vulnerability that can be exploited by remote attackers to submit a special request that can obtain sensitive file information...

CVE-2020-8009

CVE-2020-8009 affects AVB MOTU devices; the vulnerability is a /.. directory traversal that enables reading files such as /etc/passwd. The available documents consistently describe the flaw and its impact, but they do not provide exploitation details or explicit remediations. No additional techni...

Solaris xlock Information Disclosure

@Mediaservice.net Security Advisory 2020-01 last updated on 2020-01-15 Title: Low impact information disclosure via Solaris xlock Application: Setuid root xlock binary distributed with Solaris Platforms: Oracle Solaris 11.x confirmed on 11.4 X86 Oracle Solaris 10 confirmed on 10 1/13 X86...

Vxscan

This is a Python script called Vxscan, which is a comprehensive scanning tool. It is written in Python 3.6 or later and is designed to perform various scanning tasks, including sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system...