Arbitrary file download vulnerability in ZengCMS 1.0.0 backend

ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. ZengCMS1.0.0 backend has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

Design/Logic Flaw

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page...

Design/Logic Flaw

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

DEBIAN-CVE-2021-21288

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...

File Download Vulnerability in e-CRF+ Series Software of Hangzhou Icove Technology Co.

The business scope of Hangzhou Icove Technology Co., Ltd. includes: the technical development of computer hardware and pharmaceutical electronic products, the development and production of computer software, and the provision of related technical services. Hangzhou Icove Technology Co. e-CRF+...

Aviatrix Controller htaccess Security Control Bypass Vulnerability

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An htaccess security control bypass vulnerability exists in Aviatrix Controller versions prior to R5.4.1290. An attacker can exploit this vulnerability to download files...

CVE-2020-27180

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...

CVE-2020-27180

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...

CVE-2020-27180

The CVE-2020-27180 entry affects konsep-ix PubliXone, where versions before 2020.015 allow an attacker to download files by enumerating the IXCopy fileID parameter. The root cause is insufficient access control / predictable file identifiers enabling information disclosure. Documents do not speci...

CVE-2020-24246

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...

File Download Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60311)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

File Download Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Yixin Technology

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

CVE-2020-9415 TIBCO Data Virtualization

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

Privilege escalation

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS 28...

CVE-2020-15658

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...

Mozilla Code Issues Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

CVE-2020-7814

RAONWIZ KUpload (RAONWIZ) 2018.0.2.50 and earlier on Windows is vulnerable due to lack of file-extension validation, enabling an attacker to download and execute remote files (remote code execution). Affected versions are prior to 2018.0.2.51. Remediation: upgrade to 2018.0.2.51 or later.

HelloWeb 2.0 - Arbitrary File Download Vulnerability

Exploit for asp platform in category web applications Exploit Title: HelloWeb 2.0 - Arbitrary File Download Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps ...

Raonwiz CyMiInstaller322 ActiveX Code Issue Vulnerability

Raonwiz CyMiInstaller322 ActiveX is a version control program from the Korean company Raonwiz. A security vulnerability exists in File Download in Raonwiz CyMiInstaller322 ActiveX 2016.5.26.1 and earlier versions, which stems from the program failing to adequately perform an authentication...

CVE-2020-13894

CVE-2020-13894 affects Raonwiz DEXT5 Editor before or up to version 3.5.1402961, where the file handler/upload_handler.jsp vulnerability allows an attacker to download arbitrary files via the savefilepath field. The connected sources confirm the vulnerable component and the arbitrary file downloa...