Arbitrary File Download Vulnerability in NETSYS of Shenzhen NetSys Technology Co.

Ltd. was founded in 2004, is a high-tech enterprise specializing in the development of computer network security equipment. Shenzhen NETSYS Technology Co., Ltd NETSYS has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2020:14456-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14456-1 advisory. - By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This appli...

Arbitrary File Download Vulnerability in MPSec ISG1000 Security Gateway of Mapleton Technology Co.

Founded in 1993, Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. An arbitrary file download vulnerability exists in the MPSec ISG1000 security gateway of MaplePlus Technology Corporation, which can be exploited by attackers to obtain sensitive...

ESPCMS suffers from an arbitrary file download vulnerability (CNVD-2021-43042)

ESPCMS is a content management system CMS based on PHP and MySQL. An arbitrary file download vulnerability exists in ESPCMS, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Hewlett-Packard Trading (Shanghai) Co.

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer equipment, printing equipment, imaging equipment, electronic products, and related parts and components of the above products. An arbitrary file download vulnerability exists in the web-based network...

Arbitrary File Download Vulnerability in Jinhe C6 Collaboration Management Platform

C6 is a Web-based enterprise-level collaborative management platform software system with independent intellectual property rights of Jinhe Software. There is an arbitrary file download vulnerability in the Jinhe C6 collaborative management platform, which can be exploited by attackers to obtain...

Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS

This is an IN PROGRESS persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality: File Download, File Exfiltration, File Download + Persistent Execution Usage: run shepard.exe as Administrator with the following command line arguments -d remoteLocation, writePath:...

OBottle Arbitrary File Download Vulnerability

OBottle is a lighter, database-free blog. An arbitrary file download vulnerability exists in cg.php in OBottle version 2.0. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2020-36009

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

Arbitrary file deletion

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in cg.php (the \c\g.php path) contains an arbitrary file download vulnerability. The CVE entry documents that this affects OBottle 2.0 and impacts confidentiality (C) with partial leakage per CVSS2/3 metrics, and contributes a HIGH impact under CVSSv3. The connected sources corroborat...

OBottle 安全漏洞

OBottle is a lighter, database-free blog. An arbitrary file download vulnerability exists in cg.php in OBottle version 2.0. An attacker can exploit this vulnerability to obtain sensitive information...

Arbitrary File Download Vulnerability in Tianrongxin Technology Group Reporter

Founded on August 30, 1985, Skyrun Technology Group is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in Tianrongxin Technology Group Reporter, which can be exploited by attackers to obtain sensitive informati...

Nextcloud: Download of file with arbitrary extension via injection into attachment header

Description ----------- When downloading mail attachments, the app fails to properly escape quotes in the content disposition header. Because of this, an attacker can send a victim a file with a benign extension such as .txt or .png which when downloaded will be stored with a malicious extension...

Arbitrary File Download Vulnerability in ESearch of Shanghai Panmicro Network Technology Co.

Ltd. is a company focusing on the field of collaborative management software to help organizations build a unified digital office platform. Ltd. ESearch suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Next-Generation Firewall Control System of Shenzhen Zhongke NetWizard Technology Co.

Ltd. was founded in 2009, headquartered in Shenzhen Futian International E-commerce Industrial Park, is a national high-tech enterprises, double soft enterprise; the earliest domestic VPN R & D manufacturers, professional network security products R & D vendors, the company has been committed to...

Arbitrary File Download Vulnerability in SiteServer CMS

SiteServer CMS is open source, cross-platform, enterprise-class CMS content management system. SiteServer CMS suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

TamronOS IPTV System Exploits Arbitrary File Download Vulnerability

TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. TamronOS IPTV system suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...