Directory traversal

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

WebNMS Framework 5.2SP1 Text File Download

Summary WebNMS is an industry-leading used to build network management applications architecture. The File Download feature does not require login you can download any text, non-binary file. Vulnerability details FetchFile to allow not logged in download the file, but only the text content of the...

Remote Text File Access on Traps Endpoint Server Management

The Traps ESM Server license mechanism allows for remote license validation. The unintended ability to download text files using this subsystem was recently identified. Ref CYV-8717...

WebNMS Framework Server Arbitrary Text File Download

This module abuses a vulnerability in WebNMS Framework Server 5.2 that allows an unauthenticated user to download files off the file system by using a directory traversal attack on the FetchFile servlet. Note that only text files can be downloaded properly, as any binary file will get mangled by...

HackerOne: Know undisclosed Bounty Amount when Bounty Statistics are enabled.

Hi, When a program does not disclose How much bounty is paid to particular report , but if bounty statics is enabled then undisclosed Bounty Amount can be enumerated. For example Uber does not disclose bounty awarded to particular researcher but show bounty statics so we can write a script that...

[SECURITY] Fedora 24 Update: w3m-0.5.3-24.fc24

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

The vulnerability of the ZENworks Configuration Management information system allows attackers to carry out “Xpath injection” attacks and gain read access to text files.

The vulnerability of the ChangePassword RPC method in the ZENworks Configuration Management information system management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to perform “Xpath injection” attacks and gain access to tex...

The vulnerability of the WebSphere MQ message processing service, which allows a hacker to obtain confidential information

The vulnerability of the MQXR component of the WMQ Telemetry service in the WebSphere MQ processing system lies in the fact that registration data is stored in an open text file. Exploiting this vulnerability could allow a local attacker to obtain confidential information...

[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

The vulnerability of the iOS operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Data Detectors Engine component in the iOS operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service denial using a specially crafted text file...

Apple iOS Special Text File Code Execution Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS's handling of special text files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by users and can be executed wit...

Memory corruption

Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file...

Apple OS X Text File External Reference Information Disclosure Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability exists in Apple OS X that allows remote attackers to exploit the vulnerability to construct malicious text files that can be parsed by an application, which can obtain sensitive user information...

up.time 7.5.0 - Upload and Execute

up.time 7.5.0 - Upload and Execute up.time 7.5.0 Upload And Execute File Exploit Vendor: Idera Inc. Product web page: http://www.uptimesoftware.com Affected version: 7.5.0 build 16 and 7.4.0 build 13 Summary: The next-generation of IT monitoring software. Desc: up.time suffers from arbitrary...

CVE-2015-3689

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688...

CVE-2015-3685

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689...

Memory corruption

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688...

Memory corruption

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689...

Memory corruption

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689...

CVE-2015-3688

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689...