Arbitrary File Download Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file download vulnerability in the library cluster management system of Guangzhou Tutron Computer Software...

Gate One Directory Traversal Vulnerability (Dec 2020)

Gate One is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:liftoffsoftware:gateone...

Arbitrary File Download Vulnerability in H3C S1526

H3C S1526 is a new generation switch launched by Xinhua San Technologies Co. It is targeted at the cultural industry market such as Internet cafes, sing-along bars and digital movie theaters. The H3C S1526 suffers from an arbitrary file download vulnerability that can be exploited by attackers to...

Arbitrary File Download Vulnerability in Viwit Information TMS System

Vantage Information is a company that provides customers with a comprehensive logistics hybrid cloud solution that integrates intelligence and mobile connectivity and supports microservices architecture. An arbitrary file download vulnerability exists in Viwit's TMS system, which can be exploited...

Arbitrary File Download Vulnerability in WS5302 of Beijing StarNet Ruijie Network Technology Co.

The WS5302 is a wireless controller. The WS5302 has an arbitrary file download vulnerability that can be exploited by an attacker to download bin files and obtain sensitive information...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can download file of a agenda 💥 IMPACT user dont have access to specific agenda but still can download file uploaded to this agenda . 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B...

Arbitrary File Download Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An arbitrary file download vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform o...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can download project file 💥 STEP TO REPRODUCE ========================== 1. From admin account add user B as normal user .\ now give user B bellow permission for project module.\ ----Read projects and tasks shared project and projects I'm contact for. Can also enter time...

Arbitrary File Download Vulnerability in Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

The business scope of Beijing Zhongchuang Vision Technology Co., Ltd. includes: technology development of communication equipment; technology development, technology transfer, technology consulting and technology service of electronic products; software development; sales of communication...

CVE-2021-29024

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication...

CVE-2021-29024

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication...

CVE-2021-29024

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication...

Directory traversal

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication...

CVE-2021-29024

CVE-2021-29024 affects InvoicePlane 1.5.11, where a misconfigured web server enables unauthenticated directory listing and file download, effectively allowing directory traversal to private files. The root cause is misconfiguration that permits access to sensitive directories/files without authen...

InvoicePlane 路径遍历漏洞

InvoicePlane is a software application. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane version 1.5.11 suffers from a path traversal vulnerability that originates from a misconfigured web server that allows unauthenticated...

PT-2021-18028 · Unknown · Invoiceplane

Name of the Vulnerable Software and Affected Versions: InvoicePlane version 1.5.11 Description: The issue allows unauthenticated directory listing and file download due to a misconfigured web server. This enables an attacker to perform directory traversal and download files that are supposed to b...

Arbitrary File Download Vulnerability in FLIR-AX8

Teledyne FLIR specializes in the design, development, production, marketing and promotion of specialized technologies for enhanced situational awareness. An arbitrary file download vulnerability exists in FLIR-AX8. An attacker could exploit the vulnerability to download relevant system...

Arbitrary File Download Vulnerability in Netcom NS-ASG Application Security Gateway

Beijing Netcom Technology Co., Ltd. is a provider of network application management equipment. An arbitrary file download vulnerability exists in the Netcom NS-ASG Application Security Gateway. An attacker can exploit the vulnerability to obtain sensitive information...

Arbitrary File Download Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An arbitrary file download vulnerability exists in the AmarALS Credit Risk Management System, which can be exploited by an attacker to download...

CVE-2021-28149

Hongdian H8922 3.0.5 devices allow Directory Traversal. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out with a web...