CVE-2019-19169

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

PT-2020-10074

Name of the Vulnerable Software and Affected Versions Dext5.ocx ActiveX versions 5.0.0.116 and earlier Description The issue allows a remote attacker to download arbitrary files by setting specific arguments to the ActiveX method, which can be leveraged for code execution. Recommendations For...

BMC Control-M/Agent Arbitrary File Download Vulnerability

Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A security vulnerability exists in BMC Control-M/Agent and Control-M/Server communication when using th...

CVE-2019-19169: Undefined Security Weakness

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

MPC Sharj 3.11.1 - Arbitrary File Download

Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC Sharj is a free open source script for creating sim ca...

Haozitong Video Conferencing Enterprise Edition Server Administration Background Exists Arbitrary File Download Vulnerability

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a cloud computing product and service provider. Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition, which can be exploited by attackers to obtain sensitive information...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

Arbitrary file deletion

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219

CVE-2019-19219 affects BMC Control-M/Agent 7.0.00.000. The CNVD entry describes a vulnerability in Control-M/Agent–Control-M/Server communication over TCP that lets remote attackers submit a special request to download arbitrary files. The NVD entry similarly states Arbitrary File Download. No re...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

PT-2020-10099

Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue allows for arbitrary file download. Recommendations For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2019-19219: Undefined Security Weakness

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

Arbitrary File Download Vulnerability in Website Building System of Shanghai Baoxin Software Co.

Shanghai Baoshin Software Co., Ltd Baoshin Software for short is a listed software enterprise actually controlled by China Baowu and held by Baosteel. Shanghai Baoshin Software Co., Ltd. website building system has an arbitrary file download vulnerability, which can be exploited by an attacker to...

ESPCMS suffers from an arbitrary file download vulnerability (CNVD-2020-29422)

ESPCMS is a content management system CMS based on PHP and MySQL. ESPCMS has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

Arbitrary File Download Vulnerability in Surplus Visual Recording and Broadcasting System

Guangzhou Ncast Electronic Technology Co., Ltd hereinafter referred to as Ncast, founded in 2007, is a high-tech enterprise focusing on three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing. Ncast's recording and broadcasting system...

Arbitrary File Download Vulnerability in Education Resources Cloud Platform

Guangzhou Ncast Electronic Technology Co., Ltd hereinafter referred to as Ncast, founded in 2007, is a high-tech enterprise focusing on three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing. An arbitrary file download vulnerability...

RCE Exploit Released for IBM Data Risk Manager

UPDATED Four serious security vulnerabilities in the IBM Data Risk Manager IDRM have been identified that can lead to unauthenticated remote code execution RCE as root in vulnerable versions, according to analysis – and a proof-of-concept exploit is available. IBM weighed in on the problem this...

Researcher Discloses 4 Zero-Day Bugs in IBM's Enterprise Security Software

A cybersecurity researcher today publicly disclosed technical details and PoC for 4 unpatched zero-day vulnerabilities affecting an enterprise security software offered by IBM after the company refused to acknowledge the responsibly submitted disclosure. The affected premium product in question i...

jizhi CMS 1.6.7 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CV...