7899 matches found
EvilSelenium - A Tool That Weaponizes Selenium To Attack Chromium Based Browsers
EvilSelenium is a new project that weaponizes Selenium to abuse Chromium-based browsers. The current features right now are: Steal stored credentials via autofill Steal cookies Take screenshots of websites Dump Gmail/O365 emails Dump WhatsApp messages Download & exfiltrate files Add SSH keys to...
Exploit for Code Injection in Vmware Spring_Framework
CVE-2022-22965 PoC - Payara Arbitrary File Download Minimal e...
CVE-2022-26591
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...
CVE-2022-26591
Affected product: FANTEC GmbH MWiD25-DS firmware 2.000.030. Vulnerability: unauthenticated attackers can access and download arbitrary files via a crafted GET request. This is supported by multiple sources (Red Hat, NVD entries, CNNVD) describing the same issue. Impact (as stated): potential expo...
FANTEC MWiD25-DS Authorization Issue Vulnerability
The FANTEC MWiD25-DS is a wireless extender from FANTEC Germany. An authorization issue vulnerability exists in FANTEC MWiD25-DS Firmware version 2.000.030, which can be exploited by an attacker to access and download arbitrary files via a specially crafted GET request...
CVE-2022-26591: Session Fixation
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
The plugin does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. Create a new download, add a file and put the followi...
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
The plugin does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. PoC Create a new download, add a file and put the...
CVE-2022-27248: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative path when invoking the affected DownloadDwg endpoint. An attack uses the path field to...
WordPress admin-word-count-column 2.2 - Local File Read Vulnerability
Exploit Title: WordPress Plugin admin-word-count-column 2.2 - Local File Download Google Dork: inurl:/wp-content/plugins/admin-word-count-column/ Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/admin-word-count-column/ Version: 2.2 Contact me: h at...
WordPress Simple File List plugin <= 3.2.7 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Admavidhya N in WordPress Simple File List plugin versions = 3.2.7. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.8...
CVE-2022-27192
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...
CVE-2022-27192
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...
Design/Logic Flaw
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...
CVE-2022-27192
The issue (CVE-2022-27192) affects the DVS Avilys document management system, specifically the Reporting module, with versions prior to 3.5.58. The underlying flaw allows an unauthenticated attacker to download arbitrary files and impersonate an administrator by reading administrative files. Affe...
CVE-2022-27192
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...
CVE-2022-27192: Insertion of Sensitive Information into Log File
The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...
openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2022:0906-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0906-1 advisory. - An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash...
