CVE-2019-9938: Authorization Bypass Through User-Controlled Key

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

PT-2019-19950

Name of the Vulnerable Software and Affected Versions SHAREit version prior to 4.0.42 Description The issue allows a remote attacker, who is authenticated as a "recognized device" and is on the same network or joins public "open" Wi-Fi hotspots created by the application when file transfer is...

CVE-2019-6273: Improper Limitation of a Pathname to a Restricted Directory

downloadfile in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files...

Arbitrary File Download Vulnerability in Joomla! Ye*** Vi*** Sh*** Component

Joomla! is an open source content management system CMS. An arbitrary file download vulnerability exists in the Joomla!Ye Vi Sh component, which stems from the program's failure to correctly process data passed by the user, and can be exploited by an attacker to download arbitrary files on the...

DotNetNuke SaveAsPDF 1.0 Arbitrary File Download

Exploit Title : DotNetNuke SaveAsPDF Modules 1.0 Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/03/2019 Vendor Homepage : bizmodules.net dnnsoftware.com Software Information Links :...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

Design/Logic Flaw

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

CVE-2019-9632 affects ESAFENET CDG V3 and V5. The vulnerability enables arbitrary file download via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. Reported impact is information disclosure; CVSSv3 base score 7.5 (HI...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632: Undefined Security Weakness

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

PT-2019-19766

Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions V3 and V5 Description The issue concerns an arbitrary file download vulnerability. It can be exploited via the fileName parameter in the "download.jsp" endpoint, specifically when the InstallationPack parameter is...

CVE-2019-9622

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

CVE-2019-9622

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

Directory traversal

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

CVE-2019-9622

CVE-2019-9622 affects eBrigade (up to version 4.5) and enables Arbitrary File Download through a ../ directory traversal in the showfile.php parameter, demonstrated by accessing user-data/save/backup.sql. The root cause is unsafely handling path input in showfile.php, allowing retrieval of files ...

CVE-2019-9622

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

CVE-2019-9622: Improper Limitation of a Pathname to a Restricted Directory

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

PT-2019-19759

Name of the Vulnerable Software and Affected Versions eBrigade versions prior to 4.5 Description The issue allows for Arbitrary File Download via directory traversal in the showfile.php file parameter. This can be exploited by using '../' to access files outside the intended directory, as...

Arbitrary file download vulnerability in s-cms news portal system do***.php page

An arbitrary file download vulnerability exists in the do.php page of the s-cms news portal system, which allows an attacker to forge cookies to bypass authentication and download files at will...