Forcecontrol Technology Forcecontrol Web Directory Arbitrary File Download Vulnerability

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the Forcecontrol Web directory, which can be exploited by attackers to obtain sensitive information...

PT-2020-16089

Name of the Vulnerable Software and Affected Versions CRMEB version 3.0 Description A SSRF issue exists in the downloadimage interface, allowing remote download of arbitrary files on the server and potentially enabling remote execution of arbitrary code. Recommendations For CRMEB version 3.0,...

Hrsale 2.0.0 Local File Inclusion

Exploit Title: Hrsale 2.0.0 - Local File Inclusion Date: 10/21/2020 Exploit Author: Sosecure Vendor Homepage: https://hrsale.com/index.php Version: version 2.0.0 Description: This exploit allow you to download any readable file from server with out permission and login session. Payload :...

Arbitrary File Download Vulnerability in HRSALE Management System

HRSALE is a human resource management system. An arbitrary file download vulnerability exists in the HRSALE management system. An attacker can exploit the vulnerability to download arbitrary sensitive files...

Cisco ASA and FTD 9.6.4.42 - Path Traversal

Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal Date: 2020-10-10 Exploit Author: 3ndG4me Vendor: www.cisco.com Product: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html CVE : CVE-2020-3452 TARGET=$1 CISCOKNOWNFILES="logo.gif httpauth.html userdialog.htm...

Design/Logic Flaw

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...

CVE-2020-15677

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site the one suffering from the open redirect rather than the site the file was actually downloaded from. This vulnerability affects Firefo...

CVE-2020-25781

An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...

Design/Logic Flaw

An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...

CVE-2020-25781

An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...

CVE-2020-25781

An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...

CVE-2020-25781

Summary: The CVE-2020-25781 issue affects MantisBT prior to 2.24.3, specifically the file_download.php path. What is affected : the ability to download private issue note attachments without proper permissions. The underlying problem is improper authorization for accessing file download URLs link...

CVE-2020-13953

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...

Code injection

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...

CVE-2020-13953

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...

CVE-2020-13953

This CVE relates to Apache Tapestry where an information disclosure vulnerability allows an attacker to download files in WEB-INF via specially crafted URLs. The issue stems from an incomplete fix for CVE-2020-13953 and affects Apache Tapestry 5.4.0–5.6.3, with related advisories noting impact on...

Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability

Guangzhou Redfan Technology Co., Ltd. business scope includes computer room maintenance services, information technology consulting services, etc. Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability, attackers can use the...

CVE-2020-24333

A vulnerability in Arista’s CloudVision Portal CVP prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API...

CVE-2020-24333

The CVE-2020-24333 issue affects Arista’s CloudVision Portal (CVP) prior to 2020.2, where users with read-only or higher access to the Configlet Management module can download files not intended for access via a specific API. The vulnerability’s impact is the exposure of server-hosted files to au...

Vulnerability fixed in Spring Framework

There is a vulnerability in the Spring Framework that enables a Reflected File Download RFD attack. This vulnerability has already been patched NCSC-2015-0888, but researchers have found a way to bypass the mitigation. Pivotal has released new versions of the Spring Framework in which the...