CVE-2021-28075

CVE-2021-28075 affects iKuaiOS 3.4.8 Build 202012291059. The vulnerability is described as an arbitrary file download that attackers could exploit to obtain sensitive information. The provided documents do not include concrete technical details about the root cause, affected components, versions ...

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-28075: Undefined Security Weakness

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

PT-2021-17735

Name of the Vulnerable Software and Affected Versions: iKuaiOS version 3.4.8 Build 202012291059 Description: The issue allows attackers to exploit an arbitrary file download vulnerability to obtain sensitive information. Recommendations: For iKuaiOS version 3.4.8 Build 202012291059, at the moment...

IKuai OS 安全漏洞

IKuai OS is an operating system from the Chinese company IKuai. It provides a set of powerful gateways, DPI-based traffic shaping, AC control, and portal authentication features that can increase capital efficiency by reducing initial installation costs. A security vulnerability exists in iKuaiOS...

CVE-2021-24154

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd...

WordPress 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Theme...

PT-2021-15699

Name of the Vulnerable Software and Affected Versions: Theme Editor WordPress plugin versions prior to 2.6 Description: The issue allows administrators to download arbitrary files on the web server, such as /etc/passwd, due to a lack of validation of the GET file parameter before it is passed to...

CVE-2021-24154: Files or Directories Accessible to External Parties

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd...

Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability

Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...

Arbitrary file download vulnerability in yycms

yycms is a movie and television system. yycms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

YzmCMS has an arbitrary file download vulnerability

YzmCMS is a lightweight open source content management system based on YZMPHP. YzmCMS has an arbitrary file download vulnerability that can only be exploited by attacks to obtain sensitive information...

Songcms is vulnerable to arbitrary file downloads

SongCMS is a free and open source CMS based on PHP+MySQL, ASP+Access/SQL Server development, enterprise-oriented, multi-language support. Songcms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Ranzhi Synergy v5.2 there are arbitrary file download vulnerabilities

Ranzhi Collaboration Management System by the customer management CRM, daily office OA, cash bookkeeping CASH, team sharing TEAM and application navigation IPS five modules, mainly for small and medium-sized teams of internal management. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Ran...

Novel Boutique House-plus 3.5.1 - Arbitrary File Download Vulnerability

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerable code:...

Novel Boutique House-plus 3.5.1 Arbitrary File Download

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Date: 27/03/2021 Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerab...

Novel Boutique House-plus 3.5.1 - Arbitrary File Download

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Date: 27/03/2021 Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerab...

Arbitrary File Download Vulnerability in SCMS

SCMS is the underlying engine of a secure content management system. SCMS suffers from an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive information...

Apache Ambari Arbitrary File Download Vulnerability

Apache Ambari is a web-based tool that supports provisioning, management and monitoring of Apache Hadoop clusters. An arbitrary file download vulnerability exists in Apache Ambari 2.6.2.2 and earlier versions. An attacker can exploit this vulnerability by constructing filenames to traverse other...