File Download Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60311)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

File Download Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Yixin Technology (CNVD-2020-60310)

The Smart-MDS multimedia command and control system has a converged access function, providing a unified dispatching management platform with multi-service convergence and access to mainstream audio and video communication systems. Smart-MDS Multimedia Command and Dispatch System has a file...

File Download Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Yixin Technology

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

WMIHACKER - A Bypass Anti-virus Software Lateral Movement Command Execution Tool

中文版Chinese version Disclaimer: The technology involved in this project is only for security learning and defense purposes, illegal use is prohibited! Bypass anti-virus software lateral movement command execution test tool（No need 445 Port） Introduction: The common WMIEXEC, PSEXEC tool execution...

IBM InfoSphere Guardium Directory Traversal Vulnerability

InfoSphere Guardium is an enterprise information database auditing and protection solution. A directory traversal vulnerability exists in IBM InfoSphere Guardium 8.0, 8.01, and 8.2, which allows an attacker to send a malicious URL request to download arbitrary files on the system...

Microsoft Windows Finger Security Bypass / C2 Channel

Title: Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WindowsTCPIPFingerCommandC2ChannelandBypassingSecuritySoftware.txt + twitter.com/hyp3rlinx +...

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

Brave Software: Arbitrary file download due to bad handling of Redirects in WebTorrent

Summary: Previously I reported 963155 how an attacker can trick user into downloading malicious files using ".save torrent" feature, In this report I am going to reproduce the same behavior but by abusing a different feature. Description While I was testing webtorrent on brave I noticed that...

Malicious Package in qingting

All versions of qingting contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

CVE-2020-7830

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download...

Design/Logic Flaw

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download...

CVE-2020-7830

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download...

CVE-2020-7830

CVE-2020-7830 affects RAONWIZ RAON KUpload 2018.0.2.50 and earlier. The vulnerability arises from insufficient validation during download, enabling files to be downloaded to arbitrary paths due to unchecked extensions and download paths. Impact is partial confidentiality, integrity, and availabil...

Arbitrary File Download Vulnerability in shopxo

ShopXO is an open source enterprise-level open source e-commerce system. shopxo has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

TIBCO Software Data Virtualization Arbitrary File Download Vulnerability

TIBCO Software Data Virtualization is an enterprise data virtualization solution. An arbitrary file download vulnerability exists in the TIBCO Data Virtualization Server component of TIBCO Software Data Virtualization, which can be exploited by a remote attacker to submit a special request to...

Brave Software: Arbitrary file download via "Save .torrent file" option can lead to Client RCE and XSS

Summary: An attacker can use the "Save .torrent file" option in WebTorrent to smuggle malicious files onto the client's machine. Description Brave allows users to download the ".torrent" via WebTorrent. WebTorrent decides whether a file is torrent or not based on the following headers...

CVE-2020-9415

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...