Arbitrary File Download Vulnerability in SeaCMS

SeaCMS Ocean CMS, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. SeaCMS has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive system information...

Arbitrary File Download Vulnerability in LIMS Master System of Chengdu Qingsoft Qingzhi Software Co.

Ltd. under the brand "Qingzhi" is located in Chengdu, Sichuan Province, is a software development service provider specializing in Laboratory Information Management System LIMS. An arbitrary file download vulnerability exists in the main LIMS system of Chengdu QSoft QZ Software Co. An attacker ca...

Videoconferencing Enterprise Edition Server Administration Background Exists Arbitrary File Download Vulnerability

Videoconferencing Enterprise Edition Server Management Backend is a web-based videoconferencing product. An arbitrary file download vulnerability exists in the Video Conferencing Enterprise Edition server administration backend, which can be exploited by attackers to obtain sensitive information...

V8+ Terminal Security System of Beijing Falcon Security Technology Co., Ltd. has Arbitrary File Download Vulnerability

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Beijing Falcon Security Technology Co., Ltd Terminal Security System 9.0 has Arbitrary File Download Vulnerability

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical treatment and grouped enterprises. Beijing Falcon Security Technology Co., Ltd Terminal Security System 9.0 has an arbitrary file download...

VulnCheck KEV: CVE-2020-11738

WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro...

Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition (CNVD-2021-29146)

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a domestic cloud computing products and services provider. Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition, which can be exploited by attackers to obtain sensitive...

Backdoor.Win32.Hupigon.das Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/7afe56286039faf56d4184c476683340.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.das Vulnerability: Unauthenticated Open Proxy Description: The malware drops ...

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-28172

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28172

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

Path traversal

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-28075

CVE-2021-28075 affects iKuaiOS 3.4.8 Build 202012291059. The vulnerability is described as an arbitrary file download that attackers could exploit to obtain sensitive information. The provided documents do not include concrete technical details about the root cause, affected components, versions ...

CVE-2021-28172

CVE-2021-28172 describes a path traversal vulnerability in the file download function of Vangene deltaFlow E-platform. The underlying issue allows remote attackers to access credential data through the download mechanism. The entry cites a network-accessible vector with low attack complexity and ...

CVE-2021-28172

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage...

IKuai OS 安全漏洞

IKuai OS is an operating system from the Chinese company IKuai. It provides a set of powerful gateways, DPI-based traffic shaping, AC control, and portal authentication features that can increase capital efficiency by reducing initial installation costs. A security vulnerability exists in iKuaiOS...

CVE-2021-24154

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd...