CVE-2019-9530 The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory...

Schneider Electric Modicon M580 TFTP server information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the TFTP server functionality of the Schneider Electric Modicon M580 Programmable Automation Controller. A specially crafted TFTP get request can cause a file download, resulting in disclosure of sensitive information. An...

SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

Path traversal

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343

CVE-2019-13343 affects Butor Portal prior to 1.0.27 via a path traversal vulnerability in WhiteLabelingServlet. The t parameter is not properly sanitized, allowing a pre-authentication arbitrary file download by constructing a path like /wl?t=../../...&h=. Impact is potential exposure of server f...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

Arbitrary file download vulnerability in the ba***.cl***.php file of the Seven Little Bears repository system

Seven bears library system a similar Baidu library online document preview, selling system. A vulnerability exists in the ba.cl.php file of the Seven Little Bears library system, which can be exploited by an attacker to obtain sensitive information. An attacker can exploit the vulnerability to...

Directory Traversal and Arbitrary File Download Vulnerabilities in MayiCMS (Ant Classification Information System)

MayiCMS Ant Classified Information System is a php mysql based website builder. Ant Classifieds Information System suffers from directory traversal and arbitrary file download vulnerabilities. An attacker can obtain sensitive information by traversing the directory and downloading website source...

V-SOL GPON / EPON OLT Platform File Download Vulnerability

V-SOL GPON is a network switch device. A file download vulnerability exists in the V-SOL GPON / EPON OLT platform, which can be exploited by an attacker to download a download configuration...

Arbitrary File Download Vulnerability in Guojiz

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

WeLive da***.php file has an arbitrary file deletion download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive da.php file exists arbitrary file deletion and download vulnerability, an attacker can use the vulnerability can be cross-directory download, delete arbitrary files...

Arbitrary File Download Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS arbitrary file download vulnerability, an attacker can use the vulnerability to read any file in th...

OpenEMR Path Traversal Vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A path traversal vulnerability exists in the 'fileName' parameter of the...

Google Chrome has multiple file download vulnerabilities

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit the vulnerability to bypass file download protection with the help of a specially crafted website...

Multiple Vulnerabilities in Youmu's Learning Platform

Ltd. is a company that builds institutions' informatized teaching and management support system based on the comprehensive platform of Youmu class online education. There are multiple vulnerabilities in the UMOCL learning platform, which can be exploited by attackers to arbitrarily upload, downlo...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 77 to the Stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 77.0.3865.75 contains a number of fixes and improvements -- a full list of changes in this build is available in the log. Wat...

Arbitrary File Download Vulnerability in Mobile Office Portal KK System

BlueLine is a large-platform OA service provider and knowledge management solution provider, a national high-tech enterprise engaged in knowledge-based consulting, software development, implementation and technical services for organizations. An arbitrary file download vulnerability exists in the...

CVE-2019-13408

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...