PT-2022-24030

Name of the Vulnerable Software and Affected Versions Booster for WooCommerce WordPress plugin versions prior to 5.6.7 Booster Plus for WooCommerce WordPress plugin versions prior to 5.6.5 Booster Elite for WooCommerce WordPress plugin versions prior to 1.1.7 Description The issue allows...

Simmeth System Supplier Manager Arbitrary File Download Vulnerability

Simmeth System Supplier Manager is a supply chain software from Simmeth System, a German company, and an arbitrary file download vulnerability exists in versions prior to Simmeth System Supplier Manager 5.6, which can be exploited by attackers to download arbitrary files from a web server by...

CVE-2022-3762: Undefined Security Weakness

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrar...

CVE-2022-3762

The CVE-2022-3762 entry describes a vulnerability in the Booster for WooCommerce family of WordPress plugins (Booster for WooCommerce before 5.6.7, Booster Plus before 5.6.5, Booster Elite before 1.1.7) where modules do not validate files to download, enabling ShopManager and Admin to download ar...

WordPress Plugin Booster for WooCommerce: Path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

Untrusted File Download

firefox is vulnerable to untrusted file downloads. The vulnerability exists when downloading an HTML file which allows an attacker to change the file extension and perform unauthorized actions...

CVE-2022-44583

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

CVE-2022-44583

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

CVE-2022-44583

CVE-2022-44583 affects WordPress via the WatchTowerHQ plugin (versions

CVE-2022-44583

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

CVE-2022-44583 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

PT-2022-27256 · Unknown · Watchtowerhq

Name of the Vulnerable Software and Affected Versions: WatchTowerHQ plugin versions prior to 3.6.16 Description: The issue is related to an Unauth. Arbitrary File Download vulnerability. This means that unauthorized users may be able to download arbitrary files, potentially leading to sensitive...

CVE-2022-44583: Files or Directories Accessible to External Parties

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...

WordPress plugin WatchTowerHQ has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

PT-2022-26818 · Arobas Music · Arobas Music Guitar Pro

Name of the Vulnerable Software and Affected Versions: Arobas Music Guitar Pro for iPad and iPhone versions prior to 1.10.2 Description: The issue allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Recommendations: For versions prior to 1.10.2,...

CVE-2022-43264: Improper Limitation of a Pathname to a Restricted Directory

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

Arobas Music Guitar Pro path traversal vulnerability

Arobas Music Guitar Pro is a multi-track guitar, bass and sheet music editor from the French company Arobas Music. A security vulnerability exists in Arobas Music Guitar Pro v1.10.2 and earlier, which stems from a vulnerability that allows an attacker to implement directory traversal and download...

CVE-2022-42977

The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...