2752 matches found
CVE-2024-50508
CVE-2024-50508 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Download Description The Woocommerce Product Design plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to rea...
CVE-2025-30567
はじめに WordPress WP01 における無許可の任意ファイルダウンロード！ 環境設定 ステップ 1: WP01 プラグインをダウンロードしますが… はは、心配しないでください。プラグインのソースコードはこちらです。 ステップ 2: 提供された wp01 フォルダをパッケージ化し、WordPress のプラグインセクションにアップロードします。このように→ 分析 単純です — 脆弱性は次の箇所でトリガーされます: 次に、makearchive メソッドが呼び出されている場所を確認します。 2つの AJAX アクションフックがあります —...
CVE-2024-9935
CVE-2024-9935 PDF Generator 插件 for Elementor Page Builder = 1.7.5 - 未认证的任意文件下载 用法 python CVE-2024-9935.py http://example.com...
CVE-2025-9345
Managefy 製 File Manager、Code Editor、および Backup におけるパストラバーサルの概念実証 脆弱性タイプ: パストラバーサル（任意のファイルダウンロード） 影響を受ける関数: ajaxdownloadfile 影響: 低権限の認証済みユーザー（Subscriber 以上）は、flmfile パラメータの検証不足を悪用して、機密設定ファイルを含むサーバー上の任意のファイルをダウンロードできます。 CVSS v3.1 スコア: 6.5 中 ベクター: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 説明 GET リクエストの...
CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD
COMJOOMANAGER 2.0 -DOWNLOAD ARBITRARIO DI FILE Raccolta di database in massa con plugin : COMJOOMANAGER, dal CMS: Joomla, progetto sviluppato in Python 2.x, maggiori informazioni, accedi al video YouTube. CVE: 2017-18345 Rischio : Security Risk High 0day.Today-ID: 29950 ExploitDB-id: 44252...
CVE-2024-46987
CVE-2024-46987 Exploit - Camaleon CMS Pfad-Traversal Dieses Tool nutzt eine Pfad-Traversal-Schwachstelle in Camaleon CMS CVE-2024-46987 aus. Es ermöglicht das beliebige Herunterladen von Dateien und enthält eine automatisierte Funktion, um SSH-Schlüssel von auf dem System entdeckten Benutzern...
CVE-2024-9047
POC - Plugin WordPress File Upload, nel file wfufiledownloader.php prima della versione = 4.24.11 - CVE-2024-9047 Panoramica Il plugin WordPress File Upload è vulnerabile a causa di una convalida degli input impropria nel file wfufiledownloader.php, che interessa le versioni = 4.24.11. Questa...
WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download
Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. id: CVE-2025-47445 info: name: WordPress Eventin Themewinter ≤ 4.0.26 - Arbitrary File Download...
Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download
The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...
Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download
Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...
RP_Import_RCE
Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...
CVE-2022-22965-PoC_Payara
CVE-2022-22965 PoC - Payara मनमाना फ़ाइल डाउनलोड CVE-2022-22965 Spring भेद्यता को Payara/Glassfish में पुन: उत्पन्न करने का न्यूनतम उदाहरण। Payara/Glassfish के लिए वैकल्पिक पेलोड जो दुर्भावनापूर्ण उपयोगकर्ता को मनमाना वेब रूट सेट करने की अनुमति देता है, जिससे मनमाना फ़ाइल डाउनलोड होता है। डॉकर...
CVE-2024-4956-Sonatype-Nexus-Repository-Manager
CVE-2024-4956-Sonatype-Nexus-Repository-Manager O Sonatype Nexus Repository Manager fornece uma plataforma central para armazenar artefatos de build CVE-2024-4956 é uma vulnerabilidade de travessia de caminho path traversal no Sonatype Nexus Repository Manager que permite a um atacante criar uma...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to an unauthenticated arbitrary file download via the downloadDocEx.do interface. An attacker can supply an arbitrary value to the targetPath parameter to download any file from the system without authentication. No specific patch version, mitigation, or confirmed in...
CVE-2025-9215
StoreEngine Potente Plugin WordPress eCommerce per Pagamenti, Membership, Affiliati, Vendite e Altro = 1.4.0 - Download Arbitrario di File Autenticato Subscriber+ Il plugin StoreEngine contiene una vulnerabilità nella sua funzionalità di Import/Export CSV che consente a qualsiasi utente autentica...
day04-nexus-4956
Tag 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Was: Nicht authentifizierter Path-Traversal-Angriff ermöglicht es jedem, mit einer manipulierten URL beliebige Dateien herunterzuladen. Schwachstelle: Betrifft Nexus Repo 3 Versionen ≤ 3.68.0. Behoben in 3.68.1. Quelle: Sonatype Advisory +...
CVE-2026-28167
CVE-2026-28167 is an unauthenticated arbitrary file download vulnerability in the WordPress Super Forms plugin affecting versions 6.3.315 and below . The flaw allows a remote attacker to download arbitrary files from the server without authentication, leading to a high confidentiality impact (CVS...
CVE-2026-28167 WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
