CVE-2020-7813

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

Arbitrary File Download Vulnerability in Website Management System of Hangzhou Viking Club Network Technology Co.

Hangzhou Vickers Club Network Technology Co., Ltd. is a website builder. Hangzhou Vickers Club Network Technology Co., Ltd. website builder management system suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download arbitrary files...

Wowza Media Systems Streaming Engine Arbitrary File Download Vulnerability

Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems in the United States. A security vulnerability exists in the download logging feature in Wowza Media Systems Streaming Engine 4.x.x and prior versions. An attacker can exploit the...

CVE-2019-19454

An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine = 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0...

Design/Logic Flaw

An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine = 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0...

CVE-2019-19454

The CVE-2019-19454 issue affects Wowza Streaming Engine (

Arbitrary File Download Vulnerability in Kaiping Lianke Network Technology Co.

Kaiping Lianke Network was founded in 2005, is a main website construction, website promotion, speedy software, bathroom ERP management software, micro letter marketing company. Kaiping City, Lianke Network Technology Co., Ltd. station-building system exists arbitrary file download vulnerability,...

The vulnerability of the Telerik UI software for ASP.NET AJAX exists due to insufficient testing of input data. This allows attackers to execute arbitrary file downloads or execute arbitrary code.

The vulnerability of the Telerik UI software for ASP.NET AJAX exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to perform arbitrary file downloads or execute arbitrary code...

Arbitrary File Download Vulnerability in EPX3000 Configuration Management System

EPX3000 series belongs to high-performance multimedia communication switching equipments, which are mainly suitable for all kinds of enterprise multimedia communication business applications. An arbitrary file download vulnerability exists in the EPX3000 configuration management system, which can...

Arbitrary File Download Vulnerability in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a provider of video products and applications, mastering video processing, video and audio coding and decoding, and network adaptability. The AVCON6 system management platform of Huaping Information Technology Co., Ltd. suffers from an arbitrary file...

Langfang Extreme Networks Technology Co., Ltd Extreme CMS beta version suffers from arbitrary file download vulnerability

Extreme CMS is open source and free PHPCMS web content management system. Ltd Extreme CMS beta version suffers from an arbitrary file download vulnerability, which can be exploited by attackers to compromise confidentiality...

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

Arbitrary File Download Vulnerability in Haiwell SCADA

Haiwei Cloud Configuration Software is an industrial automation monitoring and management platform software developed by Xiamen Haiwei Technology Co. An arbitrary file download vulnerability exists in Haiwell SCADA, which can be exploited by attackers to obtain sensitive information about the...

Blaauw Remote Kiln Control Path Traversal Vulnerability (CNVD-2020-28490)

The Blaauw Remote Kiln Control is an automated ceramic kiln controller from Blaauw in the Netherlands. A path traversal vulnerability exists in Blaauw Remote Kiln Control. An attacker could use this vulnerability to download arbitrary files from the host device...

CVE-2020-4430

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535...

CVE-2020-4430

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535...

CVE-2020-7803

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

CVE-2020-7803

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

Arbitrary file deletion

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

CVE-2020-7803 Zoneplayer ActiveX File Download Vulnerability

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...