Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
•added 2018/07/23 11:51 p.m.•33 views

Directory Traversal in tmock

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host: localhost and server Response: http HTTP/1.1 200 OK Date:...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2018/07/23 11:51 p.m.•44 views

GHSA-J6W4-PG6P-5MRV Directory Traversal in tmock

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host: localhost and server Response: http HTTP/1.1 200 OK Date:...

7.5CVSS7.5AI score0.01974EPSS
SaveExploits1References4
CNVD
CNVD
•added 2018/06/28 12:00 a.m.•17 views

tmock Directory Traversal Vulnerability

tmock is a static file server. A directory traversal vulnerability exists in tmock. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

7.5CVSS7.7AI score0.01974EPSS
SaveExploits1References1
Veracode
Veracode
•added 2018/06/07 4:26 p.m.•22 views

Directory Traversal

tmock is vulnerable to directory traversal attacks. This attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

7.5CVSS7.3AI score0.01974EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2018/06/07 2:29 a.m.•28 views

CVE-2017-16106

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.01974EPSS
SaveExploits1References2
Prion
Prion
•added 2018/06/07 2:29 a.m.•26 views

Directory traversal

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

5CVSS7.4AI score0.01974EPSS
SaveExploits1References2
Mend
Mend
•added 2018/06/07 2:00 a.m.•3 views

CVE-2017-16106

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

8.7CVSS0.01974EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2018/06/07 2:00 a.m.•34 views

CVE-2017-16106

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.4AI score0.01974EPSS
SaveExploits1References2
CVE
CVE
•added 2018/06/07 2:00 a.m.•70 views

CVE-2017-16106

CVE-2017-16106 : The static file server tmock is vulnerable to a directory traversal via URLs containing ".. /", allowing access to the filesystem (e.g., reading /etc/passwd). Several connected advisories confirm this issue and indicate there is no patch available ; the guidance is to restrict tm...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/07 12:00 a.m.•5 views

CVE-2017-16106: Improper Limitation of a Pathname to a Restricted Directory

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.2AI score0.01974EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/06/07 12:00 a.m.•4 views

PT-2018-6135

Name of the Vulnerable Software and Affected Versions: tmock affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL. For example, an attacker can send a...

7.5CVSS0.01974EPSS
SaveExploits1References6
Rows per page
Query Builder