Arbitrary File Download Vulnerability in Internet of Things Platform of Xin Kaipu Electronics Co.

Ltd. is an enterprise specializing in the research and development, production, sales and system integration of one-card software and products. An arbitrary file download vulnerability exists in the Internet of Things IoT platform of Xin Kaipu Electronics Co. An attacker can exploit the...

Cisco Security Manager 安全漏洞

Cisco Security Manager CSM is a suite of enterprise-level management applications from Cisco that are used to configure firewall, VPN, and intrusion protection security services on Cisco network and security devices. A path traversal vulnerability exists in Cisco Security Manager 4.21 and earlier...

The vulnerability in the web interface of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a perpetrator to trigger a system reboot.

The vulnerability of the web-based interfaces of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense lies in the absence of restrictions on file downloads. Exploiting this vulnerability could allow a malicious actor to trigger a system reboot by downloading files into specific...

CVE-2020-25172

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

Path traversal

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

Cisco Integrated Management Controller Authorization Bypass Vulnerability

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. An authorization bypass vulnerability exists in the API endpoints of Cisco Integrated Managemen...

Kaixin Electronic Document Inventory in Arbitrary File Download Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library is vulnerable to an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on...

PT-2020-4665 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller affected versions not specified Description: A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take...

Konzept-iX PubliXone Authorization Issues Vulnerability

Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. PubliXone 2019.045 suffers from a security vulnerability that can cause cross-site scripting, account takeover, lack of access control, hard-coded keys, and file download distress. No...

Arbitrary File Download Vulnerability in Zendo Open Source Edition

Zendo Open Source Edition is a research and development project management software. Zendo Open Source Edition suffers from an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2020-27180

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...

Code injection

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...

CVE-2020-27180

The CVE-2020-27180 entry affects konsep-ix PubliXone, where versions before 2020.015 allow an attacker to download files by enumerating the IXCopy fileID parameter. The root cause is insufficient access control / predictable file identifiers enabling information disclosure. Documents do not speci...

CVE-2020-27180

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...

Xi'an Ziyun Antelope Network Technology Co., Ltd.'s CLTPHP has Arbitrary File Download Vulnerability

cltphp is a content management system based on php technology. There is an arbitrary file download vulnerability in CLTPHP of Xi'an Purple Cloud Antelope Network Technology Limited Liability Company. An attacker can exploit the vulnerability to download arbitrary file downloads and obtain sensiti...

Arbitrary File Download Vulnerability in Haozitong Video Conferencing System of Shenzhen Yinpeng Cloud Computing Co.

Shenzhen YinPeng Cloud Computing Co., Ltd. was established on September 11, 2013, the company's scope of business includes the development and sale of cloud computing technology, computer software, hardware product design and so on. Shenzhen YinPeng Cloud Computing Co., Ltd. GoodView video...

Zhongbang CRMEB server-side request forgery vulnerability

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. CRMEB version 3.0 has a server-side request forgery vulnerability , the vulnerability stems from the downloadimage interface SSRF vulnerability , you can remotely download any file on...

CVE-2020-25466

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...

Server side request forgery (ssrf)

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...

ForceControl Technology ForceControl Web Service Directory Arbitrary File Download Vulnerability

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the ForceControl Web Services directory, which can be exploited by attackers to obtain sensitive information...