CVE-2023-6421 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one...

CVE-2023-6421 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one...

CVE-2023-6421

The CVE-2023-6421 entry concerns the WordPress Download Manager plugin for WordPress, with versions prior to 3.2.83. The vulnerability exposes download passwords by leaking them when an invalid password is submitted to the plugin’s validate-password API endpoint, enabling unauthenticated attacker...

CVE-2023-5991

The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server...

Arbitrary File Download Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-05347)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

CVE-2023-5991: Improper Limitation of a Pathname to a Restricted Directory

The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server...

WordPress Ultimate Addons for Beaver Builder Plugin <= 1.35.13 is vulnerable to Arbitrary File Download

Software Ultimate Addons for Beaver Builder Type Plugin Vulnerable versions = 1.35.13 Fixed in 1.35.14 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-51401 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 8fb95010e714 Credits Rafi...

PT-2023-32464 · WordPress · Hotel Booking Lite

Name of the Vulnerable Software and Affected Versions: Hotel Booking Lite WordPress plugin versions prior to 4.8.5 Description: The issue arises from the plugin's failure to validate file paths provided via user input and its lack of proper CSRF and authorisation checks. This allows unauthenticat...

The ICA file will be downloaded when launching resources in browser

The ICA file may be downloaded when launching the resource from a browser...

CVE-2023-50264

CVE-2023-50264 affects Bazarr prior to v1.3.1, where the /system/backup/download/ endpoint in bazarr/app/ui.py reads a user-controlled filename without validation and passes it to send_file, enabling arbitrary file read on the system. The issue is confirmed by multiple sources and is fixed in ver...

PT-2023-30813

Name of the Vulnerable Software and Affected Versions Multisuns EasyLog web+ affected versions not specified Description The issue is related to a path traversal vulnerability within a specific parameter in a URL. This allows an unauthenticated remote attacker to bypass authentication and downloa...

Multisuns EasyLog web+ Path Traversal Vulnerability

Multisuns EasyLog web+ is an unattended multi-loop digital phone recording system from Multisuns. A path traversal vulnerability exists in Multisuns EasyLog web+ v1.13.2.8, which originates from a path traversal in a specific URL, and can be exploited by a remote attacker to bypass authentication...

CVE-2023-48373: Improper Limitation of a Pathname to a Restricted Directory

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

PT-2023-30804 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...

ITPison OMICARD EDM Path Traversal Vulnerability

ITPison OMICARD EDM is a high-speed newsletter EDM marketing and distribution system from China's ITPison. A path traversal vulnerability exists in ITPison OMICARD EDM v6.0.1.5, which originates from a path traversal on a specific page, and can be exploited by a remote attacker to bypass...

HPESBCR04583 rev.1 - Multiple Vulnerabilities In HPC Configurations Using Slurm

Potential Security Impact: Local: Session Reuse; Remote: Arbitrary File Download, Denial of Service DoS, Execution of Arbitrary Code, SQL Injection, Session Reuse, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray Programming Environment Slurm 22.10...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-25650 Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-25650

CVE-2023-25650 affects ZTE ZXCLOUD iRAI, where the backend fails to escape special strings or restrict paths in the download interface, enabling an attacker with user permissions to modify a request parameter and trigger arbitrary file downloads. The vulnerability is rooted in improper input hand...