2735 matches found
Arbitrary File Download Vulnerability in shopxo
ShopXO is an open source enterprise-level open source e-commerce system. shopxo has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...
TIBCO Software Data Virtualization Arbitrary File Download Vulnerability
TIBCO Software Data Virtualization is an enterprise data virtualization solution. An arbitrary file download vulnerability exists in the TIBCO Data Virtualization Server component of TIBCO Software Data Virtualization, which can be exploited by a remote attacker to submit a special request to...
Brave Software: Arbitrary file download via "Save .torrent file" option can lead to Client RCE and XSS
Summary: An attacker can use the "Save .torrent file" option in WebTorrent to smuggle malicious files onto the client's machine. Description Brave allows users to download the ".torrent" via WebTorrent. WebTorrent decides whether a file is torrent or not based on the following headers...
CVE-2020-9415
The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...
Arbitrary File Download Vulnerability in Heartland OA
Heartland OA is a multi-functional and intelligent office application. An arbitrary file download vulnerability exists in Heartland OA. An attacker can exploit the vulnerability to download arbitrary files...
CVE-2020-7817
MyBrowserPlus downloads the files needed to run the program through the setup file Setup.inf. At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity verification of the files...
CVE-2020-7817
CVE-2020-7817 affects MyBrowserPlus. The issue arises from a vulnerability during setup file handling, where files downloaded for running the program through Setup.inf lack sufficient integrity verification, allowing potential arbitrary file downloads. Connected documents do not provide product/v...
WeLive online customer service system suffers from arbitrary file download vulnerability
WeLive Online Customer Service System is an online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability. An attacker can use this vulnerability to download arbitrary files from the server and obtain sensitive information...
WordPress Product Input Fields for WooCommerce plugin <= 1.2.6 - Unauthenticated Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download vulnerability discovered by NinTechNet in WordPress Product Input Fields for WooCommerce plugin versions = 1.2.6. Solution Update the WordPress Product Input Fields for WooCommerce plugin to the latest available version at least 1.2.7...
CVE-2017-18923
beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...
CVE-2017-18923
beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...
Langfang Extreme Networks Technology Co., Ltd Extreme CMS has arbitrary file download vulnerability
Extreme CMS is an open source and free PHPCMS web content management system. Ltd Extreme CMS has an arbitrary file download vulnerability that can be exploited by an attacker to read any file in the system...
HelloWeb 2.0 - Arbitrary File Download Vulnerability
Exploit for asp platform in category web applications Exploit Title: HelloWeb 2.0 - Arbitrary File Download Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps ...
HelloWeb 2.0 - Arbitrary File Download
Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...
HelloWeb 2.0 Arbitrary File Download
Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...
Arbitrary file download vulnerability in Swordfish Forum
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. Swordfish Forum has an arbitrary file download vulnerability that can be exploited by attackers to download database backup files...
Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call
Security nonce leak, allowing any authenticated users such as subscribers to make unauthorised AJAX call which could lead to arbitrary file deletion/download and function call. Note WPScanTeam: We do not consider the issue fully remediated, as the AJAX calls rely on CSRF check for authorisation,...
CVE-2020-15026
Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...
