206 matches found
PT-2025-50514
Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system...
CVE-2025-60805: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the "pre-resource" option in bes-web.xml...
EUVD-2001-0179
Malware in sbrugna...
EUVD-2003-0041
Malware in sbrugna...
EUVD-2007-2967
Malware in sbrugna...
EUVD-2015-3267
Malware in sbrugna...
EUVD-2010-2497
Malware in sbrugna...
EUVD-2022-4656
Malicious code in bioql PyPI...
EUVD-2022-35618
Malicious code in bioql PyPI...
EUVD-2022-1792
Malicious code in bioql PyPI...
EUVD-2022-3142
Malicious code in bioql PyPI...
Cisco Identity Services Engine IpAccessFilter Direct Request Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass IP restrictions on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of the web.xml file. The issue results from an incomplete...
CVE-2025-2860
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web .xml file. In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website...
Security Bulletin: Provision to add https and Secure Flag to bayeux_browser cookie for IBM Control Desk.
Summary BAYEUXBROWSER cookie is generated from Cometd Server and it remains live with the session. In older versions of cometd server, BAYEUXBROWSER cookie was neither true for https nor for secure. But in the current version ie. 5.0.3, there is a provision to make the cookie true for https and...
Apache Tomcat Remote Code Execution Vulnerability
Apache Tomcat is the United States Apache Apache Software Foundation, a lightweight Web application server. The program implements the Servlet and JavaServer Page JSP support. A remote code execution vulnerability exists in Apache Tomcat due to a configuration in web.xml that turns on readonly to...
Apache Tomcat 安全漏洞
Apache Tomcat is the United States Apache Apache Software Foundation, a lightweight Web application server. The program implements the Servlet and JavaServer Page JSP support. A remote code execution vulnerability exists in Apache Tomcat due to a configuration in web.xml that turns on readonly to...
Atlassian Jira Server and Data Center Path Traversal Vulnerability
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint...
Jetty WEB-INF File Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Jetty WEB-INF File Disclosure', 'Description' = %q Jetty suffers from a vulnerability where certain encoded URIs and ambiguous paths can access...
VulnCheck KEV: CVE-2021-26086
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint...
Deserialization of untrusted data
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...