Arbitrary file download vulnerability in the fileName parameter of GoodVision video conferencing system

GoodVision Video Conferencing System is a software application for pc platforms in Simplified Chinese language. There is an arbitrary file download vulnerability in the fileName parameter of GoodVision Video Conferencing System. This allows attackers to exploit the vulnerability to obtain sensiti...

SedSystems D3 Decimator Default Credentials / File Disclosure

SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this device it will announce itself with "connected" or...

PHPCMS WAP module arbitrary file download vulnerability

PHPCMS is a website management software. The software is developed in a modular way and supports a variety of classification methods. Using it makes it easy to design, develop and maintain a personalized website. An arbitrary file download vulnerability exists in the PHPCMS WAP module, which can ...

D-Link DWR-116 Arbitrary File Download Vulnerability

The DWR-116 is a wireless N300 multi-WAN router from D-Link. An arbitrary file download vulnerability exists in the web interface of the D-Link DWR-116, which can be exploited by a remote attacker to read an arbitrary file via a "GET /uir/" request.... double dot in the "GET /uir/" request to rea...

WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...

D-Link DWR-116 DWR-116A1 - Arbitrary File Download

D-Link DWR-116 DWR-116A1 - Arbitrary File Download Title: D-Link DWR-116 Arbitrary File Download Vendor: D-Link www.dlink.com Affected models: DWR-116 / DWR-116A1 Tested on: V1.01EU, V1.00CPb10, V1.05AU CVE: CVE-2017-6190 Date: 04.07.2016 Author: Patryk Bogdan @patrykbogdan Description: D-Link...

Wordpress Photo Gallery Plugin Arbitrary File Download Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the Wordpress Photo Gallery plugin, which allows attackers to exploit the...

Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download

Vulnerability title: Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Membership Simplified 1.58 Vulnerabilities exist in the url: /wp-content/plugins/membership-simplified-for-oap-members-only/download.php...

Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download

Vulnerability title: Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Photo Gallery v3. 0 Vulnerabilities exist in the url: http://localhost/PLUGINPATH/macdownload.php Vulnerability details:...

WordPress Membership Simplified 1.58 Arbitrary File Download

import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir...

Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download

Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File...

HP Intelligent Management Center Arbitrary File Download Vulnerability

HP Intelligent Management Center is a set of network intelligent management center solutions from Hewlett-Packard HP. A security vulnerability exists in HP Intelligent Management Center that could be exploited by remote attackers to submit a specific request to download arbitrary files...

Wordpress Membership Simplified v1.58 Plugin - Arbitrary File Download Exploit

Exploit for php platform in category web applications import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery:...

WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download Vulnerability

Arbitrary file download vulnerability found in WordPress Plugin Membership Simplified version 1.58. Plugin does't check whether the user is logged in or not and if logged does it has file download privileges. Solution We were unable to find patched version of this plugin. Also, this plugin remove...

PT-2017-16689

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 Description A Remote Arbitrary File Download issue was discovered, potentially allowing unauthorized access to files. This issue may be related to a Directory Traversal Remote Cod...

WordPress Apptha Slider Gallery 1.0 Plugin - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery...

WordPress Apptha Slider Gallery 1.0 Arbitrary File Download

Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-galler...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software:...