TomatoCart 1.x versions are susceptible to an unrestricted file creation vulnerability.
EMC Avamar version 6.1.100-402 suffers from a world-writable cache file vulnerability that leverages /tmp.
Uberharvest is a free tool designed to get a user to enter an individual website or load a text file containing many URLs at once. Once the URL(s) have been entered, the uberharvest application will crawl through the website (and all the href links within that website) searching for valid email addresses. Then the user can chose to either print the results on the screen or save them into a text file or print them out to an XML file with XSL style-sheet. Some of the many features include geolocation functionality, scanning hooks, and more.
WordPress WP-Realty third party plugin suffers from a local file inclusion vulnerability. Note that these findings house site-specific data.
FCKEditor version 2.6.8 ASP version suffers from a file upload protection bypass.
PRADO PHP Framework version 3.2.0 suffers from an arbitrary file read vulnerability.
Omni-Secure versions 5, 6, and 7 suffer from a remote file disclosure vulnerability.
Xivo version 1.2 suffers from an arbitrary file download vulnerability that has root level privileges.
hostapd is prone to an insecure file-permission vulnerability.
Cisco WebEx is prone to multiple remote memory-corruption vulnerabilities.
ActivePython is prone to an insecure file-permission.
Abstract: Introduction to the Portable Document Format. We look inside PDF files and learn about the format itself, it's strengths and weaknesses, and try to set a base for further individual studies. PDF is a file format everyone is using, but most people, including the majority of the hacker community, knows very little about how it works. This lecture is intended as an introduction to the PDF file format. For the audience, knowledge about other file formats is helpful but not mandatory. The file format will be explained in as much detail as fits in one hour, using self-generated "hello world" style examples as well as more complicated examples for selected PDF features.
This Metasploit module exploits a vulnerability found in Auxilium RateMyPet's. The site banner uploading feature can be abused to upload an arbitrary file to the web server, which is accessible in the 'banner' directory, thus allowing remote code execution.
This Metasploit module exploits a vulnerability found in qdPM - a web-based project management software. The user profile's photo upload feature can be abused to upload any arbitrary file onto the victim server machine, which allows remote code execution. Please note in order to use this module, you must have a valid credential to sign in.
Webify eDownloads Cart suffers from a remote arbitrary file deletion vulnerability.
Webify Blog suffers from an arbitrary file deletion vulnerability.
Ektron CMS version 8.5.0 suffers from unauthenticated file upload and XXE injection vulnerabilities.
This Metasploit module exploits a vulnerability in MobileCartly. The savepage.php file does not do any permission checks before using file_put_contents(), which allows any user to have direct control of that function to create files under the 'pages' directory by default, or anywhere else as long as the user has WRITE permission.
Splunk versions 4.3.3 and below suffer from a remote file content disclosure vulnerability.
WebPA versions 1.1.0.1 and below suffers from add administrator and arbitrary file upload vulnerabilities.
Zero Day Initiative Advisory 12-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to insufficient signature checks with the Cisco AnyConnect VPN Client. When the client is invoked through the ActiveX control it downloads and checks a file called vpndownloader.exe. This file has to be properly signed by Cisco. Once this file is downloaded it is run and downloads additional configuration files. Within the downloaded config file it is possible to force a download of executable files. Those files are not properly checked for valid certificates and are run on the host as soon as they are downloaded.
WordPress Rich Widget third party plugin suffers from an arbitrary file upload vulnerability.