CVE-2020-5398

CVE-2020-5398 - Ataque RFD Reflected File Download para Spring MVC No Spring Framework, versões 5.2.x anteriores a 5.2.3, versões 5.1.x anteriores a 5.1.13 e versões 5.0.x anteriores a 5.0.16, um aplicativo está vulnerável a um ataque de download de arquivo refletido RFD quando define um cabeçalh...

AWSBucketDump

AWSBucketDump AWSBucketDump एक उपकरण है जो लूट की तलाश में AWS S3 बकेट्स की शीघ्रता से गणना करता है। यह एक सबडोमेन ब्रूटफ़ोर्सर के समान है, लेकिन विशेष रूप से S3 बकेट्स के लिए बनाया गया है और इसमें कुछ अतिरिक्त सुविधाएँ भी हैं जो आपको स्वादिष्ट फ़ाइलों को grep करने के साथ-साथ दिलचस्प फ़ाइलों को...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon für Elementor Page Builder = 1.7.5 - Nicht authentifizierter beliebiger Datei-Download Beschreibung Das PDF Generator Addon für Elementor Page Builder Plugin für WordPress ist anfällig für Path Traversal in allen Versionen bis einschließlich 1.7.5 über die Funkti...

CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivo Não Autenticado Visão Geral O plugin PDF Generator Addon for Elementor Page Builder para WordPress é vulnerável a Path Traversal em todas as versões até, e incluindo, 1.7.5 por meio da função...

CVE-2024-55457-PoC

CVE-2024-55457-PoC O MasterSAM Star Gate v11 é vulnerável a um ataque de travessia de diretório por meio do endpoint /adama/adama/downloadService. Um atacante pode explorar essa vulnerabilidade manipulando o parâmetro file para acessar arquivos arbitrários no servidor, potencialmente levando à...

CVE-2024-46987

CVE-2024-46987: Path Traversal Automatizado 📖 Visão Geral Este repositório contém uma Prova de Conceito PoC baseada em Python para a CVE-2024-46987. Esta vulnerabilidade é uma falha de Path Traversal encontrada em módulos de download de arquivos de determinados ambientes CMS notavelmente o Camale...

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

Avis de sécurité : des contrôles d'accès insuffisants permettent le téléchargement non autorisé de fichiers Let's Chat ID CVE attribué : CVE-2026-66750 Résumé GET /files/:id/:name vérifie que l'appelant est connecté puis sert le fichier. Il ne vérifie jamais si l'appelant est autorisé à voir le...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download

Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. id: CVE-2025-47445 info: name: WordPress Eventin Themewinter ≤ 4.0.26 - Arbitrary File Download...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

Sante PACS Server.exe - Path Traversal Information Disclosure

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. id: CVE-2025-2264 info: name: Sante PACS Server.exe - Path Traversal...

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - DOWNLOAD ARBITRÁRIO DE ARQUIVOS Coletando bancos de dados em massa com o plugin: COMJOOMANAGER, do CMS: Joomla, projeto desenvolvido em python 2.x, mais informações, acesse o vídeo do youtube. CVE: 2017-18345 Risco : Alto Risco de Segurança 0day.Today-ID: 29950 ExploitDB-id:...

RP_Import_RCE

Real Player 'external::Import' download arbitrário de arquivos, vulnerabilidades de travessia de diretório levam à execução remota de código Vídeo de demonstração: https://youtu.be/CONlijEgDLc O Real Player usa a funcionalidade do Microsoft Internet Explorer e expõe propriedades e métodos por mei...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

wordpress-exploits

wordpress-exploits Exploits aleatórios do WordPress podem ou não funcionar. CVE-2019-19985 Informações root@kitploit: Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String:...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Comprometido CVE-2018-7171 Informações de contexto Este é um repositório GitHub que contém todas as informações relevantes sobre CVE-2018-7171. e mais CVE-2018-7171 representa uma vulnerabilidade de travessia de diretório/arquivo no TwonkyMedia Server versão...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon para Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivos Não Autenticado Uso python CVE-2024-9935.py http://example.com...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...