CVE-2020-5398

CVE-2020-5398 - Ataque RFD Reflected File Download para Spring MVC No Spring Framework, versões 5.2.x anteriores a 5.2.3, versões 5.1.x anteriores a 5.1.13 e versões 5.0.x anteriores a 5.0.16, um aplicativo está vulnerável a um ataque de download de arquivo refletido RFD quando define um cabeçalh...

AWSBucketDump

AWSBucketDump AWSBucketDump एक उपकरण है जो लूट की तलाश में AWS S3 बकेट्स की शीघ्रता से गणना करता है। यह एक सबडोमेन ब्रूटफ़ोर्सर के समान है, लेकिन विशेष रूप से S3 बकेट्स के लिए बनाया गया है और इसमें कुछ अतिरिक्त सुविधाएँ भी हैं जो आपको स्वादिष्ट फ़ाइलों को grep करने के साथ-साथ दिलचस्प फ़ाइलों को...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon für Elementor Page Builder = 1.7.5 - Nicht authentifizierter beliebiger Datei-Download Beschreibung Das PDF Generator Addon für Elementor Page Builder Plugin für WordPress ist anfällig für Path Traversal in allen Versionen bis einschließlich 1.7.5 über die Funkti...

CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivo Não Autenticado Visão Geral O plugin PDF Generator Addon for Elementor Page Builder para WordPress é vulnerável a Path Traversal em todas as versões até, e incluindo, 1.7.5 por meio da função...

CVE-2024-55457-PoC

CVE-2024-55457-PoC O MasterSAM Star Gate v11 é vulnerável a um ataque de travessia de diretório por meio do endpoint /adama/adama/downloadService. Um atacante pode explorar essa vulnerabilidade manipulando o parâmetro file para acessar arquivos arbitrários no servidor, potencialmente levando à...

CVE-2024-46987

CVE-2024-46987: Automatisierte Path Traversal 📖 Übersicht Dieses Repository enthält einen Python-basierten Proof of Concept PoC für CVE-2024-46987. Diese Schwachstelle ist ein Path Traversal-Fehler, der in Datei-Download-Modulen bestimmter CMS-Umgebungen insbesondere Camaleon CMS Version 2.9.0...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download

Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. id: CVE-2025-47445 info: name: WordPress Eventin Themewinter ≤ 4.0.26 - Arbitrary File Download...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

Sante PACS Server.exe - Path Traversal Information Disclosure

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. id: CVE-2025-2264 info: name: Sante PACS Server.exe - Path Traversal...

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

wordpress-exploits

wordpress-exploits Zufällige WordPress-Exploits, die möglicherweise funktionieren oder auch nicht. CVE-2019-19985 Info root@kitploit: Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String:...

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - BELIEBIGER DATEI-DOWNLOAD Massensammlung von Datenbanken mit dem Plugin: COMJOOMANAGER, aus CMS: Joomla, Projekt entwickelt in Python 2.x, weitere Informationen finden Sie im YouTube-Video. CVE: 2017-18345 Risiko : Sicherheitsrisiko Hoch 0day.Today-ID: 29950 ExploitDB-id: 4425...

RP_Import_RCE

Real Player 'external::Import' download arbitrário de arquivos, vulnerabilidades de travessia de diretório levam à execução remota de código Vídeo de demonstração: https://youtu.be/CONlijEgDLc O Real Player usa a funcionalidade do Microsoft Internet Explorer e expõe propriedades e métodos por mei...

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

Sicherheitshinweis: Unzureichende Zugriffskontrollen erlauben unbefugte Datei-Downloads Let's Chat Zugewiesene CVE-ID: CVE-2026-66750 Zusammenfassung GET /files/:id/:name prüft, dass der Aufrufer angemeldet ist, und stellt dann die Datei bereit. Es wird jedoch nie geprüft, ob der Aufrufer den Rau...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Comprometido CVE-2018-7171 Informações de contexto Este é um repositório GitHub que contém todas as informações relevantes sobre CVE-2018-7171. e mais CVE-2018-7171 representa uma vulnerabilidade de travessia de diretório/arquivo no TwonkyMedia Server versão...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon para Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivos Não Autenticado Uso python CVE-2024-9935.py http://example.com...

CVE-2022-39196-

CVE-2022-39196 Blackboard CMS – Berechtigungserweiterung Blackboard Learn Version 1.10.1 ermöglicht es remote authentifizierten Benutzern, unbeabsichtigte Dateien zu lesen, indem sie Studentenanmeldeinformationen eingeben und dann direkt eine bestimmte webapps/bbcms/execute/ URL aufrufen...