Hikvision Integrated Video and Environmental Monitoring Management System Exploits Arbitrary File Download Vulnerability

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An arbitrary file download vulnerability exists in Hikvision's integrated video and environmental surveillance management system, which can be exploited by attackers to obtain...

Arbitrary File Download Vulnerability in the FireFleece Endpoint Security Management System of Beijing FireFleece Network Technology Co.

FireFleece Endpoint Security Management System is an enterprise version of computer security protection software. Beijing FireWall Network Technology Co., Ltd FireWall Endpoint Security Management System has an arbitrary file download vulnerability that can be exploited by attackers to download...

Arbitrary File Download Vulnerability in Northeast Normal University Ideal Software Corporation's Smart Education Cloud Platform

Founded in 2001, Northeast Normal University Ideal Software Co., Ltd. is mainly engaged in the theoretical research of basic education informatization, the research, development, promotion and application of basic education resources and software, the training of teachers' education informatizati...

Arbitrary File Download Vulnerability in Blue Ocean Premier Billing Management System

Chengdu Starry Blue Ocean Network Technology Co., Ltd. was registered on August 20, 2004 in Wuhou District Market and Quality Supervision Administration. Legal representative Zhang Yuliang, the company's scope of business includes sales: computers and accessories, electronic products, communicati...

SIYUCMS suffers from an arbitrary file download vulnerability

SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file download vulnerability. An attacker can exploit this vulnerability to download arbitrary files on the server...

Arbitrary File Download Vulnerability in Renzi Network Security Management System

hereinafter referred to as Renzihang was founded in May 2000, and is committed to escorting the network information security of state management organizations, operators, enterprises and institutions, and individuals. An arbitrary file download vulnerability exists in Renzihang's network security...

Arbitrary File Download Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co., Ltd. suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to read or download arbitrary...

CVE-2020-9050: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

CVE-2021-22857

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

CVE-2021-22857: Improper Limitation of a Pathname to a Restricted Directory

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

Theme Editor < 2.6 - Authenticated Arbitrary File Download

The plugin did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd Edit WPScanTeam: The AJAX action wpajaxmkthemeeditorfileopen could also be used to achieve the same thing a...

WordPress Theme Editor plugin <= 2.5 - Multiple Authenticated Arbitrary File Download vulnerabilities

Multiple Authenticated Arbitrary File Download vulnerabilities found by Nguyen Van Khanh and WPScan security research team in WordPress Theme Editor plugin versions = 2.5. Solution Update the WordPress Theme Editor plugin to the latest available version at least 2.6...

Theme Editor < 2.6 - Authenticated Arbitrary File Download

The plugin did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd Edit WPScanTeam: The AJAX action wpajaxmkthemeeditorfileopen could also be used to achieve the same thing a...

Arbitrary file download vulnerability exists in ShopXO (CNVD-2021-14523)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion

The plugin does not check for path traversal attacks, allowing administrator to download and delete any file from the web server. Due to the lack of CSRF check on the file deletion, unauthenticated attacker could make a logged in administrator delete files from the web server as well PoC The PoC...

Hefei Mingjing Information Technology Co., Ltd. JTopCMS background there are arbitrary file download vulnerabilities

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS background arbitrary file download vulnerability, attackers can use the vulnerability to download configuration files and so on...

Arbitrary File Download Vulnerability in LinkWechat

LinkWeChat is an open source SCRM system based on enterprise WeChat. LinkWechat has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files under the system...

Arbitrary File Download Vulnerability in Beijing Tonglian Information Technology Co.

Beijing Tonglian Information Technology Co., Ltd. is a provider of informatization services focusing on governmental cooperative office, internal control management and political and legal cooperative case handling in the field of e-government. There is an arbitrary file download vulnerability in...

Arbitrary File Download Vulnerability in Hangzhou Yingfeng Software Co.

Hangzhou Yingfeng Software Co., Ltd. was registered on February 10, 2006 in Hangzhou City Market Supervision Administration. Legal representative Zhang Yongqing, the company's business scope includes general business items: services: computer hardware and software technology development, etc...

Huawei-China Telecom GPON/EPON Routing All-in-One Machine Exploits Arbitrary File Download Vulnerability

Founded in 1987, Huawei is a provider of ICT information and communications infrastructure and smart terminals. An arbitrary file download vulnerability exists in the Huawei - China Telecom GPON/EPON Routing All-in-One. An attacker can exploit the vulnerability to obtain sensitive information...