CVE-2022-44583

CVE-2022-44583 affects WordPress via the WatchTowerHQ plugin (versions

CVE-2022-44583 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

PT-2022-27256 · Unknown · Watchtowerhq

Name of the Vulnerable Software and Affected Versions: WatchTowerHQ plugin versions prior to 3.6.16 Description: The issue is related to an Unauth. Arbitrary File Download vulnerability. This means that unauthorized users may be able to download arbitrary files, potentially leading to sensitive...

WordPress plugin WatchTowerHQ 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

Arobas Music Guitar Pro 路径遍历漏洞

Arobas Music Guitar Pro is a multi-track guitar, bass and sheet music editor from the French company Arobas Music. A security vulnerability exists in Arobas Music Guitar Pro v1.10.2 and earlier, which stems from a vulnerability that allows an attacker to implement directory traversal and download...

PT-2022-26818 · Arobas Music · Arobas Music Guitar Pro

Name of the Vulnerable Software and Affected Versions: Arobas Music Guitar Pro for iPad and iPhone versions prior to 1.10.2 Description: The issue allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Recommendations: For versions prior to 1.10.2,...

CVE-2022-42977

The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...

Simmeth System Supplier Manager 路径遍历漏洞

Simmeth System Supplier Manager is a supply chain software from Simmeth System, a German company, and an arbitrary file download vulnerability exists in versions prior to Simmeth System Supplier Manager 5.6, which can be exploited by attackers to download arbitrary files from a web server by...

Atlassian Confluence 路径遍历漏洞

Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build an enterprise WiKi. A path traversal vulnerability exists in Atlassian Confluence versions prior to 1.3.5. An attacker can exploit this...

PT-2022-24691 · Unknown · Agentflow Bpm

Name of the Vulnerable Software and Affected Versions: Agentflow BPM affected versions not specified Description: The Agentflow BPM file download function has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files...

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability

Unauth. Arbitrary File Download vulnerability discovered by Dave Jong Patchstack in the WordPress WatchTowerHQ plugin versions = 3.6.15. Solution Update the WordPress WatchTowerHQ plugin to the latest available version at least 3.6.16...

CVE-2022-39022

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

Path traversal

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

WordPress Booster for WooCommerce premium <= 5.6.4 - Auth. Arbitrary File Download vulnerability

Auth. Arbitrary File Download vulnerability discovered by WPScan in WordPress Booster for WooCommerce premium versions = 5.6.4. Solution Update the WordPress Booster Plus for WooCommerce plugin to the latest available version at least 5.6.5...

Booster for WooCommerce - ShopManager+ Arbitrary File Download

The plugins do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to for example in multisite Enable the "Checkout File Upload" module and open the following URL as a...

Booster for WooCommerce - ShopManager+ Arbitrary File Download

The plugins do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to for example in multisite PoC Enable the "Checkout File Upload" module and open the following URL ...

The vulnerability of Avira Security’s update function allows attackers to enhance their privileges.

The vulnerability of Avira Security’s update function is related to the possibility of downloading arbitrary files. Exploiting this vulnerability can allow a hacker to increase their privileges...

FusionPBX 安全漏洞

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX versions prior to 4.5.30, which stems from t...

Active eCommerce CMS 6.3.0 Arbitrary File Download Vulnerability

Exploit Title: Active eCommerce CMS Arbitrary File Download Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/active-ecommerce-cms/23471405 Version: Version 6.3.0 Tested on Ubuntu 18.04 without authentication with for loop user can downlo...