BackWPup WordPress Plugin 1.4.0 File Content Disclosure

============================================= - Release date: Feb 28th, 2010 - Discovered by: Danilo Massa - Severity: High ============================================= I. VULNERABILITY ------------------------- BackWPup Wordpress plugin = 1.4.0 File content disclosure II. BACKGROUND...

myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, email protected, Sunlight, email protected Software Link:...

osTicket Local File Inclusion

---------------------------------------------------------------------------------------------------------------------- osTicket - Open Source Support Ticket System module=osTicket&file= Local File Inclusion http://osticket.com...

eLouai's Force Download Script file Parameter File Disclosure

The version of eLouai's Force Download Script hosted on the remote web server does not sanitize user-supplied input to the 'file' parameter before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the contents of sensitive files on t...

Ubuntu Drupal Theme - Brown images/layout/gradient.php File Disclosure

The version of the Ubuntu Drupal Theme - Brown installed on the Drupal install on the remote host does not properly sanitize user-supplied input to the 'start' and 'end' parameters of the 'images/layout/gradient.php' script before using it to return the contents of a file. A remote, unauthenticat...

Joomla Component com_ticket LFI vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comticket LFI vulnerability ============================================= Exploit Title : Joomla Component comticket LFI vulnerability Author : S4n470n Contact : email protected ,...

HP Intelligent Management Center Reporting Information Disclosure

HP 3Com IMC is a modular management system designed to integrate the management of devices, services and users. An information disclosure vulnerability has been reported in HP Intelligent Management Center IMC. The vulnerability is due to an error in the Intelligent Management Center that fails t...

NIBE heat pump - Local File Inclusion

!/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 which made me test the heat pumps and...

NIBE heat pump LFI Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...

Firebrand Technologies File Include Vulnerability

Exploit for php platform in category web applications ================================================= Firebrand Technologies File Include Vulnerability ================================================= ============================================================ Author : R3VANBASTARD Dork :...

Acritum Femitter 1.03 - Directory Traversal

Acritum Femitter 1.03 - Directory Traversal Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version o...

MediaInSpot CMS Local File Inclusion

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

MediaInSpot CMS - Local File Inclusion (1)

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

cfm local include exploit-vulnerability warning-the black bar safety net

1.读取metabase.xml/web.xml /password. properities sensitive files,know the www path,coldfusion,coldfusion backend encrypted password ! 2. Local contains the coldfusion logs,write cfm in a word,get a WEBSHELL...

XMail Insecure Temporary File Creation Vulnerability

XMail creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...

rar. exe at the mention of the right in the magical-vulnerability warning-the black bar safety net

3est rar. exe is? It is the famous winrar comes with a command line unzip program. At the mention of the right in the US is often todownloada variety of sensitive files, such as:SU directory. You think about it, if the su catalog file so much, do you want onedownload is?? This obviously is very...

Design/Logic Flaw

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory /var/db/freebsd-update by default, which allows local users to read copies of sensitive files after a 1 freebsd-update fetch fetch or 2 freebsd-update upgrade upgrade operation...

CVE-2009-4358

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory /var/db/freebsd-update by default, which allows local users to read copies of sensitive files after a 1 freebsd-update fetch fetch or 2 freebsd-update upgrade upgrade operation...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

This host has BackupPC intallation and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbbackuppcclientnamealiassecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability Authors: Sharath S Copyright: Copyrigh...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

BackupPC is prone to a security bypass vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...