3252 matches found
Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Date: 2020-03-26 Exploit Author: hongphukt Vendor Homepage: https://www.jinfonet.com/ Software Link: https://www.jinfonet.com/product/download-jreport/ Version: JReport 15.6 Tested on: Linux, Windows Jreport Help function...
Aquaforest TIFF Server Arbitrary File Download Vulnerability
Aquaforest TIFF Server is a TIFF Tagged Image File Format server from Aquaforest UK. Aquaforest TIFF Server version 4.0 allows unauthenticated arbitrary file downloads. No details of the vulnerability are provided at this time...
CVE-2020-9325
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download...
CVE-2020-9325
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download...
CVE-2020-9325
Aquaforest TIFF Server 4.0 is vulnerable to unauthenticated arbitrary file download. The connected sources consistently describe this issue as an unauthenticated arbitrary file download affecting Aquaforest TIFF Server 4.0. The exact root cause, affected components/versions beyond 4.0, exploit de...
PT-2020-20585
Name of the Vulnerable Software and Affected Versions Aquaforest TIFF Server version 4.0 Description The issue allows for unauthenticated arbitrary file download. This means that an attacker can download files from the server without needing to authenticate. Recommendations For Aquaforest TIFF...
CVE-2020-9325: Improper Limitation of a Pathname to a Restricted Directory
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download...
PHPKB Multi-Language 9 Authenticated Directory Traversal Exploit
Exploit for php platform in category web applications Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link: https://www.knowledgebase-script.com/pricing.php Version:...
Arbitrary File Download Vulnerability in Mingguo Security Gateway of Hangzhou ACE Information Technology Co.
MingGuard Security Gateway builds a next-generation security protection system with full-process defense and integrates traditional firewall, intrusion detection, intrusion prevention system, anti-virus gateway, Internet behavior control, VPN gateway, threat intelligence, and other security modul...
PHPKB Multi-Language 9 Authenticated Directory Traversal
Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal Google Dork: N/A Date: 2020-03-15 Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link: https://www.knowledgebase-script.com/pricing.php Version: Multi-Language v9 Tested on:...
PHPKB Multi-Language 9 - Authenticated Directory Traversal
PHPKB Multi-Language 9 - Authenticated Directory Traversal Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal Google Dork: N/A Date: 2020-03-15 Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link:...
PHPKB Multi-Language 9 - Authenticated Directory Traversal
Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal Google Dork: N/A Date: 2020-03-15 Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link: https://www.knowledgebase-script.com/pricing.php Version: Multi-Language v9 Tested on:...
Siemens SiNVR 3 Path Traversal Vulnerability (CNVD-2020-17010)
SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a path traversal vulnerability in its implementation that can be exploited by a remote attacker to download and access arbitrary files from the server...
WMCMS backend templates have arbitrary file download vulnerability
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS background templates exist arbitrary file download vulnerability. Attackers can use this vulnerability to download arbitrary files...
Arbitrary File Download Vulnerability in ZTE ZXR10 1800-2S
The ZTE ZXR10 1800-2S is a multi-service smart router manufactured by ZTE Corporation. An arbitrary file download vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to download arbitrary files...
Popular ThemeREX WordPress Plugin Opens Websites to RCE
A critical vulnerability in a WordPress plugin known as “ThemeREX Addons” could open the door for remote code execution in tens of thousands of websites. According to Wordfence, the bug has been actively exploited in the wild as a zero-day. The plugin, which is installed on approximately 44,000...
CVE-2019-19290: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The DOWNLOADS section in the web interface of the Control Center Server CCS contains a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from t...
CVE-2019-19296: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SiNVR/SiVMS Video Server All versions V5.0.0. The two FTP services default ports 21/tcp and 5411/tcp of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary fil...
