Cisco DDR2200 and 2201v1 ADSL2+ Residential Gateway devices suffer from insecure direct object reference vulnerabilities that allow for remote code execution as well as a path traversal issue.
3d75aff532e38b6b2a6184d2c0b2e44dCMS Made Simple versions 2.2.1 and below suffers from a local inclusion vulnerability.
b3f295af95e08dea0b4737419f60d4dbWordPress Photo Gallery plugin versions 1.3.34 and 1.3.42 suffer from a path traversal vulnerability.
e233d580717e45da84a27f5bb6456e20Aerohive AP340 HiveOS versions prior to 6.1r5 suffers from a local file inclusion vulnerability that allows for remote code execution.
23f7f0efaf290260644702d2fc4ec176Robert version 0.5 suffers from cross site request forgery, cross site scripting, remote SQL injection, and directory traversal vulnerabilities.
cfd060cdd873a90420373f8cc4f97108uc-httpd suffers from local file inclusion and directory traversal vulnerabilities.
1ea3e2779de86530c91d5d4ec0c8c541Western Digital TV Media Player version 1.03.07 suffers from file upload, local file inclusion, cross site request forgery, private key issue, remote SQL injection, and other vulnerabilities.
25bbe7a316a961b85fad5f438278159aASUS routers suffer from cross site request forgery and information disclosure vulnerabilities. Versions affected include RT-AC55U, RT-AC56R, RT-AC56S, RT-AC56U, RT-AC66U, RT-AC88U, RT-AC66R, RT-AC66U, RT-AC66W, RT-AC68W, RT-AC68P, RT-AC68R, RT-AC68U, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC53U, RT-AC1900P, RT-AC3100, RT-AC3200, RT-AC5300, RT-N11P, RT-N12 (D1 version only), RT-N12+, RT-N12E, RT-N18U, RT-N56U, RT-N66R, RT-N66U (B1 version only), and RT-N66W.
3d95db7d42745579a0c76b4da4866297fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in web applications.
c521918aff624c30203b6f8679f04c80Alerton Webtalk versions 2.5 and 3.3 suffer from cross site request forgery, password hash disclosure, command injection, and login flow vulnerabilities.
6e847214fd97cdfd1149ec741c350114Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and below suffer from a logoff.cgi directory traversal authentication bypass vulnerability.
e64dcba98301f1ab384f8984e9224a9bCoppermine Gallery versions 1.5.44 and below suffer from a directory traversal vulnerability.
dda5a509b6541344f2cf734ab2ab3028uc-httpd is an HTTP daemon used by a wide array of IoT devices and is vulnerable to local file inclusion and directory traversal bugs.
4dbd99715c3ee94349afae497d07d4cfMyBB versions prior to 1.8.11 suffer from a directory traversal vulnerability.
dbf0e2512ca759d8dd910d1da5c2a2bfD-Link DWR-116 suffers from an arbitrary file download vulnerability via a directory traversal attack.
239863ae7ceec29277f1ab7399cb62e8Computer Associates API Gateway versions 7, 8, and 9 suffer from CRLF response splitting and directory traversal vulnerabilities.
aa9a6a201080c8ae019201036b421b1bOpenManage Server Administrator version 8.4 suffers from a directory traversal vulnerability.
011a0fd4b9583379978aa92d49c83500GeoMoose versions 2.9.2 and below suffer from a directory traversal vulnerability.
f2cb14903dfe2ded38a20a99c9ecc2bcThe Miele Professional PG 8528 suffers from a directory traversal vulnerability.
050cd30174f650cbbfac138073fe4cafSparrow Web Server suffers from a directory traversal vulnerability.
d1783f0002f84e97b130c4c5da1a1facHttpServer version 1.0 suffers from a directory traversal vulnerability.
cff6ae54878a47c9255d6d1cd8613290dnaLIMS DNA sequencing application suffers from an improperly protected web shell, a directory traversal, insecure password storage, session hijacking, cross site scripting, and improperly protected content vulnerabilities.
b192d5704b262c433258f2c3017c4ab2Joomla Akeeba Backup component version 5.2.5 suffers from a directory traversal vulnerability.
7af40fd2a0774230dd4fd2f32528ea7cVeritas NetBackup versions 6.5.6 and 7.6.10 suffer from remote command execution, denial of service, path traversal, and privilege escalation vulnerabilities.
37a97b8dac4781674a2adc592b1913deCoppermine Gallery versions 1.5.44 and below suffer from a directory traversal vulnerability.
ea866f35dc4615d7d9332fbdb8551ec7
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed