Arbitrary File Download Vulnerability in Zhiyuan A8-V5 Collaboration Management Software

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet is a high-tech enterprise integrating product design, research and development, sales and service, providing customers with professional collaborative management software products, solutions, platforms and cloud services, and is a...

Arbitrary File Download Vulnerability in v2 Video Conferencing System

V2 for short is a high-tech enterprise focusing on Internet audio and video communication technology, and v2 video conference system is one of its video conference systems. v2 video conferencing system has an arbitrary file download vulnerability, attackers can use the vulnerability to download t...

Arbitrary File Download Vulnerability in the Internet of Things Platform of Xin Kaipu Electronics Co. Ltd (CNVD-2020-72458)

The business scope of New Cape Electronics Co., Ltd. includes: computer system integration, development and operation and maintenance, software, smart card machines, intelligent terminals, electronic instruments and meters. There is an arbitrary file download vulnerability in the Internet of Thin...

Jindao Information Technology (Shanghai) Co., Ltd T - SITE Enterprise Intelligent Website Building System has Arbitrary File Download Vulnerability

Jindao Information Technology Shanghai Co., Ltd Jindao for short, Jindao since its inception, focusing on digital marketing technology, products, services, resources, innovation and integration, has now formed the world's leading SaaS Intelligent Marketing Cloud Platform www.71360.com, the...

Arbitrary File Download Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co.

UCM Collaborative Communication Platform is a SIP communication control hardware device, which can realize traditional video conference system terminal registration, multi-party conference MCU, device management, firewall traversal and so on. There is an arbitrary file download vulnerability in t...

CVE-2020-27130

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could exploit this...

Arbitrary File Download Vulnerability in Internet of Things Platform of Xin Kaipu Electronics Co.

Ltd. is an enterprise specializing in the research and development, production, sales and system integration of one-card software and products. An arbitrary file download vulnerability exists in the Internet of Things IoT platform of Xin Kaipu Electronics Co. An attacker can exploit the...

Arbitrary File Download Vulnerability in Dieppe SSL VPN Service

Ltd. is an information security industry manufacturer integrating R&D, production and sales. An arbitrary file download vulnerability exists in DIPPER SSL VPN Service. An attacker can exploit the vulnerability to view or download arbitrary sensitive files...

Cisco Security Manager 安全漏洞

Cisco Security Manager CSM is a suite of enterprise-level management applications from Cisco that are used to configure firewall, VPN, and intrusion protection security services on Cisco network and security devices. A path traversal vulnerability exists in Cisco Security Manager 4.21 and earlier...

Path traversal

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

Kaixin Electronic Document Inventory in Arbitrary File Download Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library is vulnerable to an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on...

Arbitrary File Download Vulnerability in Zendo Open Source Edition

Zendo Open Source Edition is a research and development project management software. Zendo Open Source Edition suffers from an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

Xi'an Ziyun Antelope Network Technology Co., Ltd.'s CLTPHP has Arbitrary File Download Vulnerability

cltphp is a content management system based on php technology. There is an arbitrary file download vulnerability in CLTPHP of Xi'an Purple Cloud Antelope Network Technology Limited Liability Company. An attacker can exploit the vulnerability to download arbitrary file downloads and obtain sensiti...

Arbitrary File Download Vulnerability in Haozitong Video Conferencing System of Shenzhen Yinpeng Cloud Computing Co.

Shenzhen YinPeng Cloud Computing Co., Ltd. was established on September 11, 2013, the company's scope of business includes the development and sale of cloud computing technology, computer software, hardware product design and so on. Shenzhen YinPeng Cloud Computing Co., Ltd. GoodView video...

ForceControl Technology ForceControl Web Service Directory Arbitrary File Download Vulnerability

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the ForceControl Web Services directory, which can be exploited by attackers to obtain sensitive information...

Forcecontrol Technology Forcecontrol Web Directory Arbitrary File Download Vulnerability

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the Forcecontrol Web directory, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in HRSALE Management System

HRSALE is a human resource management system. An arbitrary file download vulnerability exists in the HRSALE management system. An attacker can exploit the vulnerability to download arbitrary sensitive files...

Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability

Guangzhou Redfan Technology Co., Ltd. business scope includes computer room maintenance services, information technology consulting services, etc. Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability, attackers can use the...

IBM InfoSphere Guardium Directory Traversal Vulnerability

InfoSphere Guardium is an enterprise information database auditing and protection solution. A directory traversal vulnerability exists in IBM InfoSphere Guardium 8.0, 8.01, and 8.2, which allows an attacker to send a malicious URL request to download arbitrary files on the system...

Brave Software: Arbitrary file download due to bad handling of Redirects in WebTorrent

Summary: Previously I reported 963155 how an attacker can trick user into downloading malicious files using ".save torrent" feature, In this report I am going to reproduce the same behavior but by abusing a different feature. Description While I was testing webtorrent on brave I noticed that...