3247 matches found
CVE-2023-45799
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files...
WordPress ICS Calendar Plugin <= 10.12.0.3 is vulnerable to Arbitrary File Download
Software ICS Calendar Type Plugin Vulnerable versions = 10.12.0.3 Fixed in 10.12.0.4 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2023-46784 Patch priority Medium CVSS severity Medium 8.2 Developer Claim ownership PSID 662755066f6f Credits Muhammad Daffa Require...
WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Arbitrary File Download
Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-46197 Patch priority Low CVSS severity Low 5.3 Developer Supsystic PSID deb6d3a6f13c Credits Rafshanzani Suhada Require...
Siemens CP-8031 路径遍历漏洞
The ICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energy supply. A path traversal vulnerability exists in the Siemens SICAM A8000 device CPCI85 firmware web server, which can be exploited by an attacker to...
PT-2023-28914
Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the "FTP server". Recommendations At the moment, there is no informatio...
SICK APU Security Vulnerability
SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from an arbitrary file download vulnerability. The vulnerability can be exploited by an attacker to download arbitrary files from a server via HTTP requests...
Arbitrary File Download Vulnerability in Yonyou UAP/NC of UFIDA Network Technology Co.
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in Yonyou UAP/NC, which can be exploited by attackers to obtain sensitive information...
CVE-2023-43696: Improper Access Control
Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...
CVE-2023-3512
Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...
CVE-2023-3512: Relative Path Traversal
Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...
CVE-2023-36851
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauthoperation.php that doesn't require authentication, an...
Prestashop Path Traversal Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The program provides a variety of payment methods, short message alerts and product image zoom and other features. Prestashop plugin M4 PDF 3.2.3 and previous versions of a security vulnerability , the...
Information Disclosure
github.com/1panel-dev/1panel is vulnerable to Information Disclosure. The vulnerability exists due to lack of access restrictions which allows an attacker to perform arbitrary file download and expose sensitive information...
GHSA-85CF-GJ29-F555 1Panel Arbitrary File Download vulnerability
Summary Any file downloading vulnerability exists in 1Panel backend. Details Authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. PoC payload: POST /api/v1/files/download/bypath HTTP/1.1 Host: ip Content-Type: application/json...
CVE-2023-39965 1Panel Unauthorized access in Backend
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may caus...
CVE-2023-39965
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may caus...
PT-2023-27177 · 1Panel · 1Panel
Name of the Vulnerable Software and Affected Versions: 1Panel versions 1.4.3 Description: 1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface, specifically the "POST...
1Panel Security Vulnerability
1Panel is an open source Linux server O&M panel for the Chinese 1panel community. A security vulnerability exists in 1Panel version 1.4.3. An attacker can exploit the vulnerability to download arbitrary files through the API interface...
Arbitrary File Download Vulnerability in Damon Enterprise Manager (DEM)
Damon Enterprise Manager DEM is a centralized management platform that monitors, manages, and maintains DM databases through the web interface. An arbitrary file download vulnerability exists in DEM, which can be exploited by attackers to obtain sensitive information...
