Design/Logic Flaw

An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to...

DLink ADSL Router DSL-2750E SEA_1.07 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.07 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

Security feature bypass

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

Removed by vendor...

PT-2017-8492 · Red Hat +1 · Subscription-Manager +2

Name of the Vulnerable Software and Affected Versions: Subscription Manager versions prior to 1.17.7-1 Description: The issue concerns weak permissions set for cache directories in the Subscription Manager package, allowing local users to access sensitive information by reading files in these...

gitlab -- Directory traversal via "import/export" feature

GitLab reports: The import/export feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. This included sensitive files such as those that...

Wordpress wptf-image-gallery information disclosure vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. wptf-image-gallery is one of the gallery plugin for full-screen display. An information disclosure vulnerability exists in Wordpress wptf-image-gallery plugin v1.03, which can be exploited ...

File Containment Vulnerability in Salient Smart DNS

RealEase Intelligent DNS Management System is a set of intelligent DNS, domain name management and wide-area load balancing solutions for Internet enterprises, medium and large websites and universities. A file inclusion vulnerability exists in the /index.php?-dautoprependfile%3d/etc/passwd/ and...

F5 Networks BIG-IP : BIG-IP virtual server with HTTP Explicit Proxy and/or SOCKS vulnerability (K35520031)

BIG-IP virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution ...

Joomla component com_joomanager parameter path arbitrary file download vulnerability

Joomla! is a content management system. An arbitrary file download vulnerability exists in the parameter path of the Joomla component joomanagerde. Allows an attacker to exploit the vulnerability to download sensitive information such as configuration files...

[SECURITY] [DLA 601-1] quagga security update

Package : quagga Version : 0.99.22.4-1+wheezy3 CVE ID : CVE-2016-4036 CVE-2016-4049 Debian Bug : 835223, 822787 The quagga package installs world readable sensitive files in /etc/quagga, and might be subject to denial of service because of lacking packet size checks. CVE-2016-4036 The quagga...

Arbitrary File Containment Vulnerability in VoIP Operation Support System of Kunshi Network Technology Co.

The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. The product suffers from an arbitrary file inclusion vulnerability, which can be exploited by an attacker to read sensitive files such as the service...

VideoIQ Camera Local File Inclusion Vulnerability

VideoIQ Camera is prone to local file disclosure vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure

Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Local File Inclusion Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on Camera types : CCPW3025-IR , CVMW3025-IR Product References :...

Liferay Path Traversal Vulnerability

Liferay is the U.S. Liferay company's set of J2EE-based portal solutions , it uses EJB and JMS and other technologies , and can be used as a Web publishing and sharing workspace , enterprise collaboration platforms , social networks and so on. A path traversal vulnerability exists in the...

Arbitrary File Read Vulnerability in Video Conferencing System of Tangqiao Technology (Hangzhou) Co.

Tangqiao Technology Hangzhou Co., Ltd. is the world's leading provider of converged video communication cloud services, video conferencing system is a remote collaborative video software. The product has an arbitrary file reading vulnerability, which can be exploited by an attacker to read server...

Hebei Xinhe Technology Co., Ltd. creative portal application system suffers from arbitrary file download vulnerability

The Creative Portal Application is a platform for website content publishing and management, and is a tool for building unit portal applications. The Creative Portal Application System of Hebei Xinhe Technology Co., Ltd. suffers from an arbitrary file download vulnerability. Allow attackers to...

Arbitrary File Download Vulnerability in Content Management System of Shandong Jierui Digital Technology Co.

The content management system of Shandong Jieri Digital Technology Co., Ltd. is a website management system used by enterprises and institutions. There is an arbitrary file download vulnerability in the content management system of Shandong Jereh Digital Technology Co. This vulnerability allows...