CVE-2023-3512

CVE-2023-3512 affects Setelsa Security ConacWin CB,

CVE-2023-3512 Relative path traversal in Setelsa Security ConacWin CB

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

Cross site scripting

Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript 1. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it i...

WordPress plugin All-in-One Video Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2021-26630

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function...

Schneider Electric Modicon M221 PLCs and SoMachine Basic Protection Mechanism Failure (CVE-2017-7575)

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port 502/tcp. Subsequently the application may be arbitrarily downloaded, modified, and uploaded...

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

MoMoCMS has an arbitrary file download vulnerability

MoMoCMS is an enterprise building system developed by php+MySQL. MoMoCMS has an arbitrary file download vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2017-7575

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port 502/tcp. Subsequently the application may be arbitrarily downloaded, modified, and uploaded...

CVE-2017-7575

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port 502/tcp. Subsequently the application may be arbitrarily downloaded, modified, and uploaded...

Easy File Uploader 1.2 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Easy File Uploader Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...

Generalized Arbitrary File Download Vulnerability in Jetta OA, ERP, CRM and Other Office Software Systems at Ningbo Jetta Software Co.

Jetta OA, ERP, CRM and other office software systems are a series of systems geared towards the daily operations and management of an organization. There is an arbitrary file download vulnerability in the above products, which can be exploited by attackers to obtain sensitive information from...

鹏达学校综合管理系统任意下载漏洞

No description provided by source...

Tequila File Hosting 1.5 Arbitrary File Download

================================================================================ Tequila File Hosting Arbitrary File Download ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Software...

WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download

WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download Title: Remote file download in simple-image-manipulator v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-16 Download Site: https://wordpress.org/plugins/simple-image-manipulator Vendor:...

用友系统任意下载订单漏洞

简要描述： 用友系统任意下载订单漏洞 详细说明： http://uporder.yonyou.com/file/ 漏洞证明：...

hdwiki注入导致任意文件下载

简要描述： RT。为一个朋友找的。 详细说明： hdwiki上传附件处文件名过滤不严，导致可以注入： function douploadimg $imgname=$FILES'photofile''name'; $extname=file::extname$imgname; $destfile=$ENV'attachment'-makepath$extname; $arrupload=file::uploadfile$FILES'photofile',$destfile; if$arrupload'result'==true ifisset$this-setting'watermark'...

HP Intelligent Management SOM FileDownloadServlet Arbitrary Download

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the FileDownloadServlet from the SOM component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management Center...

kesioncms7. 0, the latest version arbitrary download vulnerability-vulnerability warning-the black bar safety net

Author: Ghost brother Version: 90sec Description: please for vulnerability Safety test, do not the illegal use of Solution: I think the official will know. Vulnerability detection method: First register for a user login, then visit http://www. xxx. net/user/Contributor. asp can see a few can...

J-Doc <= v3.2.7 SQL Injection + Arbitrary download file

Exploit for php platform in category web applications 'lol' or idutilisateur = 1 -- ', 'password' = 'lol'; // Connection $curl = curlinit; curlsetopt$curl, CURLOPTURL, $baseurl.$folder.'index.php'; curlsetopt$curl, CURLOPTPOST, true; curlsetopt$curl, CURLOPTCOOKIEJAR, $cookiesfile;...