PT-2019-19919

Name of the Vulnerable Software and Affected Versions BroadLearning eClass versions prior to 2.5.10.2.1 Description The issue allows arbitrary files to be downloaded without a login, specifically affecting URLs with "download attachment.php" under templates or home folders. Recommendations For...

Dell EMC Avamar ADMe Local File Inclusion Vulnerability

Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. A local file inclusion vulnerability exists in the Web Interface in Dell EMC Avamar ADMe versions 1.0.50 and 1.0.51. An attacker could exploit this vulnerability by sending a specially crafted request to...

CVE-2019-1621

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...

CVE-2019-1621 Cisco Data Center Network Manager Arbitrary File Download Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...

CVE-2019-1621: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...

Cisco Data Center Network Manager Arbitrary File Download Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An arbitrary file download vulnerability exists in the web-based management...

GrandNode 4.40 - Path Traversal / Arbitrary File Download Vulnerabilities

Exploit for multiple platform in category web applications Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

GrandNode 4.40 - Path Traversal Arbitrary File Download

GrandNode 4.40 - Path Traversal Arbitrary File Download Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Date: 06/23/3019 Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

GrandNode 4.40 Path Traversal / File Download

Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Date: 06/23/3019 Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

CVE-2019-3737

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...

CVE-2019-3737 Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...

PT-2019-16681

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar ADMe Web Interface versions 1.0.50 through 1.0.51 Description The issue allows a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application. This ...

CVE-2019-3737: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...

S-CMS Enterprise Website Builder System has Arbitrary File Download Vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system PHP version v3.0 version of the existence of arbitrary file download vulnerability, logging...

Oracle Application Testing Suite DownloadServlet Directory Traversal (CVE-2019-2557)

A directory traversal vulnerability exists in Oracle Application Testing Suite. A remote authenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable server. Successful exploitation results in arbitrary file download from the target server...

WordPress Simple File List plugin <= 3.2.4 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

Xiamen Weipin Network Technology Co., Ltd. website building system suffers from arbitrary file download vulnerability

Xiamen Weipin Network Technology Co., Ltd. is a company specializing in website construction, website planning, web design, mobile site construction, website revision, website maintenance, website hosting, Internet marketing, domain name hosting and other integrated Internet services. Xiamen Weip...

Simple File List Plugin <= 3.2.4 - Unauthenticated Arbitrary File Download

This vulnerability allows any user to download sensitive information by traversing the path Authentication required: NO...

PT-2019-2197

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Manager affected versions not specified Description The issue is related to improper validation of parameters handled by the web-based management interface, allowing an unauthenticated, remote attacker to access...

CVE-2019-1717: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management interface. An attacker could...